CVE-2024 records published in December 2024
This page lists the 3,010 CVE-2024 records published in December 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 39013.0% of these records
- Listed in CISA KEV
- 110.4% of these records
- Reported exploited
- 40.1% of these records
- Detection signal
- 371.2% of these records
- Exploit code
- 1053.5% of these records
- Actionable vendor fix
- 2,12470.6% of these records
Figures as of 2026-10-24 13:18 UTC. Records published in December 2024 have had from about 22 months to about 23 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-56803 | Ghostty improperly handles window title sequences which can lead to arbitrary command execution | 5.1CNA v4.0 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-56802 | PacoVK Tapir deploy key scope improper authorization | 8.7CNA v4.0 | 0.4% | 2024-12-31 | Fix |
| CVE-2024-56265 | WooCommerce - PDF Vouchers WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56256 | Embed PDF Viewer WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56235 | Coupon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56234 | VW Automobile Lite WordPress theme broken access control | 5.4CNA v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-56233 | Kintpv Wooconnect WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56232 | WP Nice Loader WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-31 | |
| CVE-2024-56231 | SaasPricing WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56230 | Dynamic Product Category Grid, Slider for WooCommerce WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-56229 | SearchIQ WordPress plugin Cross-Site Requst forgery (CSRF) | 4.3v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56228 | WPFactory Wishlist for WooCommerce reflected cross-site scripting | 7.1CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56227 | Royal Elementor Addons WordPress plugin broken access control | 4.3v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56226 | Royal Elementor Addons WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56225 | Premium Addons for Elementor WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56224 | Ledenbeheer WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56223 | Gulri Slider WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56222 | CodeBard Help Desk WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56221 | WPMozo Addons Lite for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56220 | SSL Wireless SMS Notification WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-56219 | Widget Options WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56218 | Contact Form 7 - Dynamic Text Extension WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56217 | Download Manager WordPress plugin broken access control | 6.3v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56216 | Themify Builder WordPress plugin local file inclusion | 6.5v3.1 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-56215 | Member Directory and Contact Form WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56214 | UserPro WordPress plugin local file inclusion | 8.3CNA v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-56213 | Eventin WordPress plugin Contributor+ limited local file inclusion | 8.8v3.1 | 0.6% | 2024-12-31 | Fix |
| CVE-2024-56212 | UserPro WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-56211 | UserPro WordPress plugin authenticated arbitrary user Meta update vulnerability | 8.8CNA v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-56210 | UserPro WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-56209 | Kleo WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-56207 | EditionGuard for WooCommerce eBook Sales with DRM WordPress plugin CSRF to privilege escalation | 8.8CNA v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-56206 | gap-hub-user-role. WordPress plugin CSRF to broken authentication | 8.8CNA v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-56205 | AI Magic SEO Content Generator and Article Writer WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-12-31 | Fix |
| CVE-2024-56204 | Sinking Dropdowns WordPress plugin CSRF to privilege escalation | 8.8CNA v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-56203 | Wayne Audio Player WordPress plugin CSRF to privilege escalation | 8.8CNA v3.1 | 0.2% | 2024-12-31 | |
| CVE-2024-56198 | path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability | 9.3CNA v4.0 | 0.7% | 2024-12-31 | Fix |
| CVE-2024-56071 | Simple Dashboard WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-12-31 | Exploit code |
| CVE-2024-56070 | WP SuperBackup WordPress plugin Multiple Subscriber+ broken access control | 7.4CNA v3.1 | 0.4% | 2024-12-31 | Fix |
| CVE-2024-56068 | WP SuperBackup WordPress plugin Subscriber+ PHP object injection | 7.5CNA v3.1 | 0.4% | 2024-12-31 | Fix |
| CVE-2024-56067 | WP SuperBackup WordPress plugin unauthenticated Backup file download vulnerability | 7.5CNA v3.1 | 11.7% | 2024-12-31 | Exploit codeFix |
| CVE-2024-56066 | Agency Toolkit WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.7% | 2024-12-31 | Fix |
| CVE-2024-56064 | WP SuperBackup WordPress plugin unauthenticated arbitrary file upload | 10.0CNA v3.1 | 33.2% | 2024-12-31 | NucleiExploit codeFix |
| CVE-2024-56063 | Essential Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56062 | Royal Elementor Addons and Templates WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-56061 | RepairBuddy WordPress plugin account takeover | 8.8CNA v3.1 | 0.4% | 2024-12-31 | Fix |
| CVE-2024-56046 | WPLMS WordPress theme unauthenticated arbitrary file upload | 9.8v3.1 | 0.8% | 2024-12-31 | Fix |
| CVE-2024-56045 | WPLMS WordPress theme unauthenticated arbitrary directory deletion vulnerability | 9.3CNA v3.1 | 0.7% | 2024-12-31 | Fix |
| CVE-2024-56044 | WPLMS WordPress theme unauthenticated arbitrary user Token Generation vulnerability | 9.8CNA v3.1 | 0.8% | 2024-12-31 | Fix |
| CVE-2024-56043 | WPLMS WordPress theme unauthenticated privilege escalation | 9.8CNA v3.1 | 0.6% | 2024-12-31 | Fix |
| CVE-2024-56042 | WPLMS WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 0.7% | 2024-12-31 | Fix |
| CVE-2024-56041 | VibeBP WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-56040 | VibeBP WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.8% | 2024-12-31 | Fix |
| CVE-2024-56039 | VibeBP WordPress plugin unauthenticated SQL injection | 9.3CNA v3.1 | 0.6% | 2024-12-31 | Fix |
| CVE-2024-56031 | Smart Shopify Product WordPress plugin arbitrary content deletion vulnerability | 6.5CNA v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-56002 | Contact Form, Survey and Form Builder MightyForms WordPress plugin broken access control | 6.4CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-55995 | Torod WordPress plugin settings Change vulnerability | 6.5CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-55991 | CRM Plugin WP-CRM System WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-55955 | Trend Micro Deep Security An insecure permissions | 6.7CNA v3.1 | 0.1% | 2024-12-31 | Fix |
| CVE-2024-55917 | Trend Micro Apex One An origin validation error | 7.8CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-55632 | Trend Micro Apex One security agent link following | 7.8CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-55631 | Trend Micro Apex One engine link following | 7.8CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-53647 | Trend Micro ID Security missing brute-force protection | 6.5CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-52050 | Trend Micro Apex One LogServer arbitrary file write | 7.8CNA v3.1 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-52049 | Trend Micro Apex One LogServer link following | 7.8CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-52048 | Trend Micro Apex One LogServer link following | 7.8CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-52047 | Trend Micro Apex One widget local file inclusion | 7.5CNA v3.1 | 1.1% | 2024-12-31 | Fix |
| CVE-2024-51667 | paytium WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-49698 | Great Restaurant Menu WP WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-12-31 | Fix |
| CVE-2024-49694 | My Wp Brand Hide menu and Hide WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-49687 | Smart Manager WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-12-31 | Fix |
| CVE-2024-49686 | Landing Page Cat WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2024-12-31 | Fix |
| CVE-2024-49422 | Samsung Mobile Devices bootloader protection mechanism failure | 5.2CNA v3.1 | 0.2% | 2024-12-31 | Fix |
| CVE-2024-45497 | Red Hat OpenShift Container Platform build process incorrect permission assignment | 7.6CNA v3.1 | 0.6% | 2024-12-31 | Fix |
| CVE-2024-25133 | Openshift-dedicated: Hive: Rce | 8.8CNA v3.1 | 0.5% | 2024-12-31 | |
| CVE-2024-13085 | PHPGurukul Land Record System login.php SQL injection | 9.8v3.1 | 0.5% | 2024-12-31 | |
| CVE-2024-13084 | PHPGurukul Land Record System search-property.php SQL injection | 9.8v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-13083 | PHPGurukul Land Record System admin-profile.php cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-13082 | PHPGurukul Land Record System search-property.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-13081 | PHPGurukul Land Record System contactus.php cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-13080 | PHPGurukul Land Record System aboutus.php cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-13079 | PHPGurukul Land Record System property-details.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-31 | |
| CVE-2024-13078 | PHPGurukul Land Record System index.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-31 | |
| CVE-2024-13077 | PHPGurukul Land Record System add-property.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-13076 | PHPGurukul Land Record System edit-propertytype.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-13075 | PHPGurukul Land Record System add-propertytype.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-13074 | PHPGurukul Land Record System index.php cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-31 | |
| CVE-2024-13072 | 1000 Projects Beauty Parlour Management System add-customer-services.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-31 | |
| CVE-2024-13070 | CodeAstro Online Food Ordering System Update User page update_users.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-31 | |
| CVE-2024-13069 | SourceCodester Multi Role Login System add-user.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-31 | |
| CVE-2024-13067 | CodeAstro Online Food Ordering System All Users page all_users.php access control | 5.3v3.1 | 0.8% | 2024-12-31 | |
| CVE-2024-13061 | 2100 Technology Electronic Official Document Management System authentication bypass | 9.8CNA v3.1 | 1.3% | 2024-12-31 | Fix |
| CVE-2024-13040 | Quanta Computer QOCA aim authorization bypass | 8.8CNA v3.1 | 0.5% | 2024-12-31 | Fix |
| CVE-2024-12839 | CHANGING Information Technology CGFIDO authentication bypass | 8.8CNA v3.1 | 0.7% | 2024-12-31 | Fix |
| CVE-2024-12838 | CHANGING Information Technology CGFIDO authentication bypass | 8.8CNA v3.1 | 0.7% | 2024-12-31 | Fix |
| CVE-2024-12108 | WhatsUp Gold Public API signing key rotation issue | 9.6CNA v3.1 | 6.8% | 2024-12-31 | Fix |
| CVE-2024-12106 | Progress WhatsUp Gold LDAP configuration interface missing authentication | 9.4CNA v3.1 | 9.7% | 2024-12-31 | Fix |
| CVE-2024-12105 | WhatsUp Gold SnmpExtendedActiveMonitor path traversal | 6.5CNA v3.1 | 42.4% | 2024-12-31 | Emerging ThreatsFix |
| CVE-2024-11972 | Hunk Companion WordPress plugin unauthenticated plugin installation | 9.8CISA ADP v3.1 | 59.1% | 2024-12-31 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-56801 | Tasklists has blind SQL injection in /ajax/reorder.php | 6.9CNA v4.0 | 0.7% | 2024-12-30 | Fix |
| CVE-2024-56800 | Firecrawl has SSRF vulnerability via malicious scrape target | 7.4CNA v3.1 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-56799 | Simofa allows unauthenticated access to API Routes | 10.0CNA v3.1 | 0.5% | 2024-12-30 | Fix |
| CVE-2024-56734 | better-auth better Auth has an open redirect vulnerability in Verify Email endpoint | 7.9CNA v4.0 | 0.4% | 2024-12-30 | Fix |
| CVE-2024-56733 | pglombardo Password Pusher session cookie handling session fixation | 5.7CNA v3.1 | 0.2% | 2024-12-30 | |
| CVE-2024-56517 | LGSL has a reflected XSS at /lgsl_files/lgsl_list.php | 5.3CNA v4.0 | 0.6% | 2024-12-30 | |
| CVE-2024-56516 | RockChinQ free-one-api password storage vulnerability | 6.9CNA v4.0 | 0.3% | 2024-12-30 | |
| CVE-2024-54181 | IBM WebSphere Automation command injection | 7.2CNA v3.1 | 1.0% | 2024-12-30 | Fix |
| CVE-2024-52294 | khoj has an IDOR in subscription management that allows unauthorized subscription modifications | 4.3CNA v3.1 | 0.4% | 2024-12-30 | Fix |
| CVE-2024-50703 | TeamPass web parameter tampering | 8.1v3.1 | 0.5% | 2024-12-30 | Fix |
| CVE-2024-50702 | TeamPass mail_me operation authorization issue | 5.3v3.1 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-50701 | TeamPass does not properly check whether a folder is in a user's allowed folders list | 4.3CNA v3.1 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-47926 | Tecnick TCExam improper neutralization of special elements used in an SQL command (SQL injection) | 9.8CNA v3.1 | 0.6% | 2024-12-30 | Fix |
| CVE-2024-47925 | Tecnick TCExam multiple improper neutralization of input during web page generation | 7.5CNA v3.1 | 0.5% | 2024-12-30 | Fix |
| CVE-2024-47924 | Boa web server improper neutralization of input during web page generation (cross-site scripting) | 7.5CNA v3.1 | 0.5% | 2024-12-30 | |
| CVE-2024-47923 | Mashov exposure of sensitive information to an unauthorized actor | 5.3CNA v3.1 | 0.4% | 2024-12-30 | Fix |
| CVE-2024-47922 | Priority exposure of sensitive information to an unauthorized actor | 7.5CNA v3.1 | 0.5% | 2024-12-30 | Fix |
| CVE-2024-47921 | Smadar SPS use of a broken or risky cryptographic algorithm | 8.4CNA v3.1 | 0.2% | 2024-12-30 | Fix |
| CVE-2024-47920 | Tiki Wiki CMS improper neutralization of input during web page generation (cross-site scripting) | 7.5CNA v3.1 | 0.5% | 2024-12-30 | Fix |
| CVE-2024-47919 | Tiki Wiki CMS improper neutralization of special elements used in an OS command | 9.8CNA v3.1 | 1.5% | 2024-12-30 | Fix |
| CVE-2024-47918 | Tiki Wiki CMS improper neutralization of script-related HTML tags in a web page (basic XSS) | 6.1CNA v3.1 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-47917 | Mobotix improper neutralization of input during web page generation (cross-site scripting) | 7.5CNA v3.1 | 0.5% | 2024-12-30 | |
| CVE-2024-46542 | Veritas Data Insight SQL injection | 6.5CNA v3.1 | 0.6% | 2024-12-30 | Fix |
| CVE-2024-22063 | ZTE ZENIC ONE R58 product has a CSV injection | 7.6CNA v3.1 | 0.8% | 2024-12-30 | Fix |
| CVE-2024-13058 | SoftIron HyperCloud authenticated, non-admin users can create storage pools via the sifi API | 4.8CNA v4.0 | 0.4% | 2024-12-30 | Fix |
| CVE-2024-13051 | Ashlar-Vellum Graphite VC6 File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13050 | Ashlar-Vellum Graphite VC6 File Parsing heap-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13049 | Ashlar-Vellum Cobalt XE File Parsing type confusion remote code execution | 7.8v3.1 | 0.2% | 2024-12-30 | |
| CVE-2024-13048 | Ashlar-Vellum Cobalt XE File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13047 | Ashlar-Vellum Cobalt CO File Parsing type confusion remote code execution | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13046 | Ashlar-Vellum Cobalt CO File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13045 | Ashlar-Vellum Cobalt AR File Parsing stack-based buffer overflow remote code execution | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13044 | Ashlar-Vellum Cobalt AR File Parsing out-of-bounds write remote code execution | 7.8v3.1 | 0.2% | 2024-12-30 | |
| CVE-2024-13043 | Panda Security Dome link following local privilege escalation | 7.8v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13042 | Tsinghua Unigroup Electronic Archives Management System information disclosure | 5.3CNA v4.0 | 0.4% | 2024-12-30 | |
| CVE-2024-13039 | code-projects Simple Chat System add_user.php SQL injection | 8.8v3.1 | 0.6% | 2024-12-30 | |
| CVE-2024-13038 | CodeAstro Simple Loan Management System Login index.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-30 | |
| CVE-2024-13037 | 1000 Projects Attendance Tracking Management System report.php attendance_report SQL injection | 9.8v3.1 | 0.4% | 2024-12-30 | |
| CVE-2024-13036 | code-projects Chat System update_room.php SQL injection | 7.5v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13035 | code-projects Chat System update_user.php SQL injection | 9.8v3.1 | 0.4% | 2024-12-30 | |
| CVE-2024-13034 | code-projects Chat System update_user.php cross-site scripting | 7.6v3.1 | 0.5% | 2024-12-30 | |
| CVE-2024-13033 | code-projects Chat System chatroom.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-12-30 | |
| CVE-2024-13032 | Antabot White-Jotter Article Editor editor server-side request forgery | 4.9v3.1 | 0.5% | 2024-12-30 | |
| CVE-2024-13031 | Antabot White-Jotter Article Content Editor editor cross-site scripting | 4.8v3.1 | 0.4% | 2024-12-30 | |
| CVE-2024-13030 | D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control | 9.8v3.1 | 1.9% | 2024-12-30 | |
| CVE-2024-13029 | Antabot White-Jotter Edit Book book server-side request forgery | 8.8v3.1 | 0.5% | 2024-12-30 | |
| CVE-2024-12993 | Location information exposure in Infinix Weather app | 4.8CNA v4.0 | 0.2% | 2024-12-30 | |
| CVE-2024-12836 | Delta Electronics DRASimuCAD STP File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-12835 | Delta Electronics DRASimuCAD ICS File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-12834 | Delta Electronics DRASimuCAD STP File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.4% | 2024-12-30 | Fix |
| CVE-2024-12828 | Webmin CGI command injection remote code execution | 8.8NVD v3.1 | 33.5% | 2024-12-30 | Exploit code |
| CVE-2024-12754 | AnyDesk link following information disclosure | 5.5CNA v3.0 | 1.2% | 2024-12-30 | |
| CVE-2024-12753 | Foxit PDF Reader link following local privilege escalation | 7.3v3.1 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-12752 | Foxit PDF Reader AcroForm memory corruption remote code execution | 7.8CNA v3.0 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-12751 | Foxit PDF Reader AcroForm out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.4% | 2024-12-30 | Fix |
| CVE-2024-11946 | iXsystems TrueNAS CORE fetch_plugin_packagesites tar cleartext transmission of sensitive information | 6.5v3.1 | 0.3% | 2024-12-30 | Fix |
| CVE-2024-11944 | iXsystems TrueNAS CORE tarfile.extractall directory traversal remote code execution | 8.8v3.1 | 1.6% | 2024-12-30 | Fix |
| CVE-2024-10044 | SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat | 9.3CNA v3.0 | 0.5% | 2024-12-30 | |
| CVE-2024-56756 | Linux kernel NVMe host memory buffer handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56755 | Linux kernel fscache volume creation vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56754 | Linux kernel CAAM crypto driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56753 | Linux kernel amdgpu GFX9 cleaner shader driver memory leak | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56752 | Linux kernel nouveau GF100 graphics channel creation vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56751 | Linux kernel IPv6 nexthop device removal handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56750 | Linux kernel EROFS file-backed mount handling denial of service | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56749 | Linux kernel DLM membership recovery vulnerability | 7.5CNA v3.1 | 0.4% | 2024-12-29 | Fix |
| CVE-2024-56748 | Linux kernel qedf memory leak | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56747 | Linux kernel qedi memory leak | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56746 | Linux kernel sh7760 framebuffer driver memory leak | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56745 | Linux kernel PCI reset method sysfs handler memory leak | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56744 | Linux kernel F2FS inode eviction handling deadlock | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56743 | Linux kernel NFS common file handling improper locking | 5.5v3.1 | 0.1% | 2024-12-29 | Fix |
| CVE-2024-56742 | Linux kernel VFIO mlx5 migration driver memory leak | 5.5NVD v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56740 | Linux kernel NFS LOCALIO read handling out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56739 | Linux kernel RTC timer subsystem vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56738 | GNU GRUB2 timing side channel | 5.3CISA ADP v3.1 | 0.4% | 2024-12-29 | Fix |
| CVE-2024-56737 | GNU GRUB2 heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.7% | 2024-12-29 | Fix |
| CVE-2024-56730 | Linux kernel 9p USB gadget transport driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56729 | Linux kernel SMB client cached directory lease handling memory leak | 4.7v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56728 | Linux kernel octeontx2 PF ethtool support vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56727 | Linux kernel octeontx2 PF flow steering null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56726 | Linux kernel octeontx2 PF cn10k support null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56725 | Linux kernel octeontx2-pf improper check for exceptional conditions | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56724 | Linux kernel TMU device interrupt handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56723 | Linux kernel PMIC device interrupt handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56722 | Linux kernel HNS RDMA driver resource exhaustion | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56721 | Linux kernel AMD erratum 1386 microcode matching out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56720 | Linux kernel BPF sockmap message handling off-by-one error | 7.8CNA v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56719 | Linux kernel stmmac Ethernet driver denial of service | 10.0CNA v3.1 | 0.5% | 2024-12-29 | Fix |
| CVE-2024-56718 | Linux kernel SMC link group vulnerability | 9.8CNA v3.1 | 0.5% | 2024-12-29 | Fix |
| CVE-2024-56717 | Linux kernel mscc Ocelot switch driver vulnerability | 7.5CNA v3.1 | 0.4% | 2024-12-29 | Fix |
| CVE-2024-56716 | Linux kernel netdevsim health reporter driver denial of service | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56715 | Linux kernel ionic Ethernet driver memory leak | 7.8CNA v3.1 | 0.3% | 2024-12-29 | Fix |
| CVE-2024-56714 | Linux kernel ionic Ethernet driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56713 | Linux kernel netdevsim page pool driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56712 | Linux kernel udmabuf driver memory leak | 5.5NVD v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56711 | Linux kernel Himax HX83102 DRM panel driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56710 | Linux kernel Ceph client memory leak | 5.5v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-56709 | Linux kernel io_uring async work queue vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-29 | Fix |
| CVE-2024-13028 | Antabot White-Jotter login observable response discrepancy | 6.3CNA v4.0 | 0.8% | 2024-12-29 | |
| CVE-2024-13025 | Codezips College Management System faculty.php SQL injection | 8.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13024 | Codezips Blood Bank Management System campaign.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-29 | |
| CVE-2024-13023 | PHPGurukul Maid Hiring Management System Search Maid page search-maid.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13022 | taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload | 9.8v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13021 | SourceCodester Road Accident Map Marker add-mark.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-12-29 | |
| CVE-2024-13020 | code-projects Chat System chatroom.php SQL injection | 8.8v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13019 | code-projects Chat System Chat Room page update_room.php cross-site scripting | 4.6v3.1 | 0.3% | 2024-12-29 | |
| CVE-2024-13018 | PHPGurukul Maid Hiring Management System profile.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-12-29 | |
| CVE-2024-13017 | PHPGurukul Maid Hiring Management System About Us page aboutus.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13016 | PHPGurukul Maid Hiring Management System edit-category.php SQL injection | 9.8v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13015 | PHPGurukul Maid Hiring Management System search-booking-request.php cross-site scripting | 6.1v3.1 | 0.3% | 2024-12-29 | |
| CVE-2024-13014 | PHPGurukul Maid Hiring Management System search-maid.php SQL injection | 9.8v3.1 | 0.5% | 2024-12-29 | |
| CVE-2024-13013 | PHPGurukul Maid Hiring Management System Contact Us page contactus.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13012 | code-projects Hostel Management System registration.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-12-29 | |
| CVE-2024-13008 | code-projects Responsive Hotel Site newsletter.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13007 | Codezips Event Management System contact.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13006 | 1000 Projects Human Resource Management System employeeview.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13005 | 1000 Projects Attendance Tracking Management System attendance_action.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13004 | PHPGurukul Complaint Management System category.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13003 | 1000 Projects Portfolio Management System MCA update_ed.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-29 | |
| CVE-2024-13002 | 1000 Projects Bookstore Management System order_process.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-29 | |
| CVE-2024-13001 | PHPGurukul Small CRM index.php SQL injection | 9.8v3.1 | 0.4% | 2024-12-29 | |
| CVE-2024-13000 | PHPGurukul Small CRM quote-details.php SQL injection | 9.8v3.1 | 0.5% | 2024-12-29 | |
| CVE-2024-12999 | PHPGurukul Small CRM edit-user.php SQL injection | 9.8v3.1 | 0.5% | 2024-12-29 | |
| CVE-2024-12238 | Ninja Forms code injection | 6.3CNA v3.1 | 0.5% | 2024-12-29 | Fix |
| CVE-2024-56708 | Linux kernel EDAC igen6 driver double free | 7.8v3.1 | 0.3% | 2024-12-28 | Fix |
| CVE-2024-56707 | Linux kernel octeontx2 DMAC filter driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56706 | Linux kernel cpum_sf sampling facility driver race condition | 7.8CNA v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56705 | Linux kernel atomisp camera driver reachable assertion | 5.5v3.1 | 0.3% | 2024-12-28 | Fix |
| CVE-2024-56704 | Linux kernel 9p Xen transport driver double free | 8.4CNA v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56703 | Linux kernel IPv6 multipath route selection infinite loop | 7.5CNA v3.1 | 0.5% | 2024-12-28 | Fix |
| CVE-2024-56702 | Linux kernel BPF raw tracepoint verifier null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56701 | Linux kernel vcpudispatch_stats interface improper locking | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56700 | Linux kernel wl128x null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56699 | Linux kernel s390 PCI hotplug driver double free | 7.8v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56698 | Linux kernel USB dwc3 gadget driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56697 | Linux kernel AMDGPU discovery NPS info null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56696 | Linux kernel ALSA sound kunit tests null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56695 | Linux kernel AMDKFD CU occupancy reporting out-of-bounds write | 7.8v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56694 | Linux kernel BPF stream verdict sockmap deadlock | 7.5CNA v3.1 | 0.4% | 2024-12-28 | Fix |
| CVE-2024-56693 | Linux kernel brd injection | 7.8CNA v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56692 | Linux kernel f2fs node truncation vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56691 | In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56690 | Linux kernel pcrypt parallel crypto denial of service | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56689 | Linux kernel PCI endpoint MHI function driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56688 | Linux kernel SunRPC TCP transport null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-12-28 | Fix |
| CVE-2024-56687 | Linux kernel MUSB Rx endpoint handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56685 | Linux kernel MediaTek ASoC sound card driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56684 | In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks() It should be size of the struct clk_bulk_data, not data pointer pass to devm_kcalloc(). | 8.4CNA v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56683 | Linux kernel VC4 HDMI debug registers denial of service | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56682 | Linux kernel RISC-V APLIC interrupt controller null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56681 | Linux kernel bcm crypto HMAC init vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56680 | Linux kernel Intel IPU6 interrupt handling denial of service | 5.5v3.1 | 0.3% | 2024-12-28 | Fix |
| CVE-2024-56679 | Linux kernel octeontx2 PF mailbox vulnerability | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56678 | Linux kernel powerpc kfence fault handling use-after-free | 7.8CISA ADP v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56677 | Linux kernel powerpc fadump CMA reservation vulnerability | 7.8CNA v3.1 | 0.3% | 2024-12-28 | Fix |
| CVE-2024-56676 | Linux kernel thermal testing framework vulnerability | 5.5v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-56512 | Apache NiFi: Missing Complete Authorization for parameter and Service References | 2.1CNA v4.0 | 3.2% | 2024-12-28 | NucleiExploit codeFix |
| CVE-2024-46973 | Imagination Technologies Graphics DDK GPU kernel driver use-after-free | 7.8CISA ADP v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-46972 | GPU DDK Security: Reference count overflow in pvr_sync_rollback_export_fence | 7.8CISA ADP v3.1 | 0.2% | 2024-12-28 | Fix |
| CVE-2024-43705 | Imagination Technologies Graphics DDK GPU kernel driver vulnerability | 7.8CISA ADP v3.1 | 0.1% | 2024-12-28 | Fix |
| CVE-2024-12998 | code-projects Online Car Rental System GET parameter index.php cross-site scripting | 6.1v3.1 | 0.5% | 2024-12-28 | |
| CVE-2024-12995 | ruifang-tech Rebuild Project Tasks Section tasks cross-site scripting | 5.3CNA v4.0 | 0.4% | 2024-12-28 | |
| CVE-2024-12994 | running-elephant Datart file upload import extractModel deserialization | 5.3CNA v4.0 | 0.6% | 2024-12-28 | |
| CVE-2024-56732 | HarfBuzz Cairo glyph buffer conversion heap-based buffer overflow | 9.3CNA v4.0 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-56675 | Linux kernel BPF uprobe attachment use-after-free | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56674 | Linux kernel virtio-net TX queue reset vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56673 | Linux kernel RISC-V vmemmap page tables denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56672 | Linux kernel blk-cgroup online pinning use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56671 | Linux kernel graniterapids crash | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56670 | Linux kernel USB gadget serial driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56669 | Linux kernel iommu/vt-d crash | 8.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56668 | Linux kernel iommu/vt-d null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56667 | Linux kernel i915 GPU driver engine capture null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56666 | Linux kernel amdkfd GPU driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56665 | Linux kernel BPF perf event tracing vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56664 | Linux kernel BPF sockmap race condition | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56663 | Linux kernel nl80211 wireless driver off-by-one error | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56662 | Linux kernel ACPI NFIT driver out-of-bounds read | 7.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-56661 | Linux kernel TIPC bearer cleanup null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56660 | Linux kernel mlx5 DR steering driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56659 | Linux kernel lapb crash | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56658 | Linux kernel net use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56657 | Linux kernel ALSA control symlink handling vulnerability | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56656 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips The 5760X (P7) chip's HW GRO/LRO interface is very similar to that of the previous generation (5750X or P5). However, the aggregation ID fields in the completion stru | 9.8CNA v3.1 | 0.4% | 2024-12-27 | Fix |
| CVE-2024-56655 | Linux kernel netfilter nf_tables rule destruction vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56654 | Linux kernel Bluetooth HCI event handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56653 | Linux kernel btmtk Bluetooth driver coredump handling use-after-free | 8.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56652 | Linux kernel Xe GPU driver register pool use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56651 | Linux kernel hi311x CAN driver use-after-free | 8.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56650 | Linux kernel netfilter x_tables LED target out-of-bounds read | 7.1CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56649 | Linux kernel enetc crash | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56648 | Linux kernel hsr out-of-bounds access | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56647 | Linux kernel ICMP host route relookup vulnerability | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56646 | Linux kernel IPv6 prefix route handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56645 | Linux kernel CAN J1939 session handling improper reference counting | 9.8CNA v3.1 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-56644 | Linux kernel IPv6 exception route handling vulnerability | 7.5CNA v3.1 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-56643 | Linux kernel DCCP feature negotiation memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56642 | Linux kernel TIPC bearer cleanup use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56641 | Linux kernel SMC close work initialization vulnerability | 7.5CNA v3.1 | 0.5% | 2024-12-27 | Fix |
| CVE-2024-56640 | Linux kernel SMC LGR and link handling use-after-free | 9.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-56639 | Linux kernel HSR RedBox supervision frame handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56638 | Linux kernel netfilter nft_inner percpu handling vulnerability | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56637 | Linux kernel netfilter ipset module loading race condition | 7.3CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56636 | Linux kernel Geneve tunnel transmit path vulnerability | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56635 | Linux kernel net use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56634 | Linux kernel grgpio GPIO driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56633 | Linux kernel TCP BPF sendmsg vulnerability | 7.8v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56632 | Linux kernel NVMe over TCP driver memory leak | 7.5CNA v3.1 | 0.4% | 2024-12-27 | Fix |
| CVE-2024-56631 | Linux kernel sg SCSI generic driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56630 | Linux kernel OCFS2 inode initialization vulnerability | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56629 | Linux kernel Wacom HID driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56628 | Linux kernel LoongArch huge page table handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56627 | Linux kernel ksmbd stream read handling out-of-bounds read | 8.1CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-56626 | Linux kernel ksmbd stream write handling out-of-bounds write | 8.8CNA v3.1 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-56625 | Linux kernel CAN device termination GPIO handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56624 | Linux kernel IOMMUFD subsystem memory leak | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56623 | Linux kernel qla2xxx SCSI driver use-after-free | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56622 | Linux kernel UFS monitoring sysfs interface divide by zero | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56621 | Linux kernel UFS real-time clock work null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56620 | Linux kernel qcom null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56619 | Linux kernel nilfs2 directory entry lookup use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56618 | Linux kernel i.MX8M Plus power domain controller denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56617 | Linux kernel CPU cache info hotplug null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56616 | Linux kernel drm/dp_mst memory corruption | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56615 | Linux kernel BPF device map out-of-bounds write | 7.8v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56614 | Linux kernel xsk out-of-bounds access | 7.8v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56613 | Linux kernel NUMA balancing memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56612 | Linux kernel GUP page unpinning null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56611 | Linux kernel mm/mempolicy null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56610 | Linux kernel KCSAN report filter lock improper locking | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56609 | Linux kernel rtw88 Wi-Fi driver TX queue vulnerability | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56608 | Linux kernel AMD display link encoder creation vulnerability | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56607 | Linux kernel ath12k bitrate mask configuration denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56606 | Linux kernel AF_PACKET socket creation use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56605 | Linux kernel L2CAP socket creation use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56604 | Linux kernel RFCOMM socket allocation use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56603 | Linux kernel CAN socket creation use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56602 | Linux kernel ieee802154 use-after-free | 7.0CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56601 | Linux kernel inet use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56600 | Linux kernel inet6 use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56599 | Linux kernel ath10k SDIO driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56598 | Linux kernel jfs improper array index validation | 7.1CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56597 | Linux kernel JFS block allocation out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56596 | Linux kernel jfs improper array index validation | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56595 | Linux kernel jfs improper array index validation | 7.8v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56594 | Linux kernel AMDGPU DMA scatter-gather mapping vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56593 | Linux kernel brcmfmac Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56592 | Linux kernel BPF hash table maps improper locking | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56591 | Linux kernel Bluetooth HCI connection handling vulnerability | 8.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56590 | Linux kernel Bluetooth HCI ACL data handling buffer overflow | 7.6CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56589 | In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add cond_resched() for no forced preemption model For no forced preemption model kernel, in the scenario where the expander is connected to 12 high performance SAS SSDs, the following call trace may occur: [ 214. | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56588 | Linux kernel hisi_sas null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56587 | Linux kernel LED class brightness attribute null pointer dereference | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56586 | Linux kernel F2FS inode eviction denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56585 | Linux kernel LoongArch TLB handler setup improper locking | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56584 | Linux kernel io_uring task context resource exhaustion | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56583 | Linux kernel deadline scheduler CPU migration vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56582 | Linux kernel Btrfs encoded read use-after-free | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56581 | Linux kernel Btrfs ref-verify use-after-free | 7.0CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56580 | Linux kernel camss null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56579 | Linux kernel Amphion video codec driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56578 | Linux kernel i.MX JPEG codec driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56577 | Linux kernel mtk-jpeg null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56576 | Linux kernel tc358743 crash | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56575 | Linux kernel i.MX JPEG codec driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56574 | Linux kernel ts2020 demodulator driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56573 | Linux kernel efi/libstub release of an invalid pointer | 7.0CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56572 | Linux kernel allegro-dvt memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56570 | Linux kernel overlayfs inode handling vulnerability | 7.8NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56569 | Linux kernel ftrace stack trace filter null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56568 | Linux kernel ARM SMMU driver probe null pointer dereference | 4.7v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56567 | Linux kernel ad7780 divide by zero | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56566 | Linux kernel slub allocator memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56565 | Linux kernel F2FS discard handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56564 | Linux kernel Ceph client MDS authentication vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56563 | Linux kernel Ceph client MDS access control vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56562 | Linux kernel I3C master address management vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56561 | Linux kernel PCI endpoint framework use-after-free | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56560 | Linux kernel slab allocator denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56559 | Linux kernel vmalloc KASAN shadow memory improper locking | 5.5v3.1 | 0.1% | 2024-12-27 | Fix |
| CVE-2024-56558 | Linux kernel NFS server export cache use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56557 | Linux kernel ad7923 ADC driver buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56556 | Linux kernel Binder freeze notifications use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56555 | Linux kernel Binder freeze notifications out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56554 | Linux kernel Binder freeze notifications use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56553 | Linux kernel Binder freeze notifications memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56552 | Linux kernel Xe GuC submission race condition | 7.8CNA v3.1 | 0.1% | 2024-12-27 | Fix |
| CVE-2024-56551 | Linux kernel amdgpu GPU driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56550 | Linux kernel s390 user stack unwinding vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56549 | Linux kernel cachefiles on-demand mode null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56548 | Linux kernel hfsplus out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56547 | Linux kernel RCU nocb offloading vulnerability | 4.7v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56546 | Linux kernel Xilinx SoC suspend handling memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56545 | Linux kernel HID Hyper-V driver vulnerability | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56544 | Linux kernel udmabuf driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56543 | Linux kernel ath12k Wi-Fi driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56542 | Linux kernel AMD display driver memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56541 | Linux kernel ath12k Wi-Fi driver use-after-free | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56540 | Linux kernel accel/ivpu race condition | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56539 | Linux kernel mwifiex Wi-Fi driver vulnerability | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56538 | Linux kernel ZynqMP KMS driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56537 | Linux kernel ZynqMP display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56536 | Linux kernel cw1200 Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56535 | Linux kernel rtw89 Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56534 | Linux kernel isofs iocharset parsing memory leak | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-56533 | Linux kernel ALSA usx2y USB audio driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56532 | Linux kernel ALSA us122l USB audio driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56531 | Linux kernel ALSA caiaq USB audio driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-56527 | TCPDF missing character escape on error messages | 7.5CISA ADP v3.1 | 0.8% | 2024-12-27 | Fix |
| CVE-2024-56522 | TCPDF has incorrect comparison | 7.5CISA ADP v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-56521 | TCPDF missing certificate validation | 9.8CISA ADP v3.1 | 0.8% | 2024-12-27 | Fix |
| CVE-2024-56520 | Tecnick tcpdf tecnickcom/tc-lib-pdf-font mishandles fonts | 7.3CISA ADP v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-56519 | Tecnick tcpdf cross-site scripting | 7.5CISA ADP v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-56509 | changedetection.io has improper input validation leading to LFR/path traversal | 8.6CNA v3.1 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-56508 | File upload vulnerability leading to XSS in LinkAce | 7.6CNA v3.1 | 0.4% | 2024-12-27 | Fix |
| CVE-2024-56507 | Reflected cross-site scripting (XSS) vulnerability in LinkAce | 4.6CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-54775 | Dcat-Admin cross-site scripting (XSS) | 4.8CISA ADP v3.1 | 0.3% | 2024-12-27 | |
| CVE-2024-54774 | Dcat-Admin dcat Admin cross-site scripting (XSS) | 4.8CISA ADP v3.1 | 0.3% | 2024-12-27 | |
| CVE-2024-54454 | Kurmi Provisioning Suite password reset vulnerability | 5.3CISA ADP v3.1 | 0.4% | 2024-12-27 | |
| CVE-2024-54453 | Kurmi Provisioning Suite DocServlet path traversal | 7.5CISA ADP v3.1 | 0.6% | 2024-12-27 | |
| CVE-2024-54452 | Kurmi Provisioning Suite logsSys.do page path traversal | 4.9CISA ADP v3.1 | 0.8% | 2024-12-27 | |
| CVE-2024-54451 | Kurmi Provisioning Suite graphicCustomization.do page vulnerability | 4.8CISA ADP v3.1 | 0.3% | 2024-12-27 | |
| CVE-2024-54450 | Kurmi Provisioning Suite X-Forwarded-For header handling vulnerability | 9.4CISA ADP v3.1 | 0.6% | 2024-12-27 | |
| CVE-2024-53476 | SimplCommerce at commit race condition | 5.9CISA ADP v3.1 | 0.6% | 2024-12-27 | Exploit code |
| CVE-2024-53239 | Linux kernel ALSA 6fire USB driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53238 | Linux kernel Bluetooth MediaTek driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53237 | Linux kernel Bluetooth use-after-free | 8.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53236 | Linux kernel xsk memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53235 | Linux kernel erofs null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53234 | Linux kernel EROFS compressed cluster handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53233 | Linux kernel UTF-8 data table loading null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53232 | Linux kernel s390 IOMMU driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53231 | Linux kernel CPPC cpufreq driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53230 | Linux kernel CPPC cpufreq driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53229 | Linux kernel RXE queue pair request handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53228 | Linux kernel RISC-V KVM SBI extension handling vulnerability | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53227 | Linux kernel bfa SCSI driver module exit use-after-free | 7.8v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53226 | Linux kernel RDMA/hns null pointer dereference | 7.5CNA v3.1 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-53225 | Linux kernel Tegra241 CMDQV queue initialization vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53224 | Linux kernel mlx5 device notifier null pointer dereference | 8.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53223 | Linux kernel MTMIPS clock driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53222 | Linux kernel zram compression algorithm attribute null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53221 | Linux kernel f2fs page bio submission null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53220 | Linux kernel f2fs segment allocation denial of service | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53219 | Linux kernel virtiofs direct I/O vulnerability | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53218 | Linux kernel f2fs garbage collection thread use-after-free | 7.8CISA ADP v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53217 | Linux kernel NFSD null pointer dereference | 7.5CNA v3.1 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-53216 | Linux kernel NFSD export cache use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53215 | Linux kernel RDMA server initialization memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53214 | Linux kernel PCIe extended capability list vulnerability | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53213 | Linux kernel lan78xx USB Ethernet driver double free | 7.8v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53212 | Linux kernel netlink dump extack handling vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53211 | In the Linux kernel, the following vulnerability has been resolved: net/l2tp: fix warning in l2tp_exit_net found by syzbot In l2tp's net exit handler, we check that an IDR is empty before destroying it: WARN_ON_ONCE(!idr_is_empty(&pn->l2tp_tunnel_idr)); idr_destroy(&pn->l2tp_tunnel_idr); By fo | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53210 | Linux kernel IUCV socket memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53209 | Linux kernel bnxt_en Ethernet driver null pointer dereference | 9.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-53208 | Linux kernel Bluetooth MGMT interface use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53207 | Linux kernel Bluetooth MGMT interface deadlock | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53206 | Linux kernel TCP request socket timer use-after-free | 9.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-53205 | Linux kernel Realtek USB PHY driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53204 | Linux kernel usb null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53203 | Linux kernel USB Type-C UCSI CCG driver improper array index validation | 7.8v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53202 | Linux kernel firmware loader vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53201 | Linux kernel AMD display driver DCN20 pipe programming null pointer dereference | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53200 | Linux kernel AMD display driver DPP setup null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53199 | Linux kernel imx-audmix ASoC driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53198 | Linux kernel Xen bus device probe memory leak | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53197 | Linux Kernel out-of-bounds access | 7.8CISA ADP v3.1 | 4.1% | 2024-12-27 | KEVKCVFix |
| CVE-2024-53196 | Linux kernel KVM arm64 MMIO instruction emulation vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53195 | Linux kernel KVM arm64 virtual timer denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53194 | Linux kernel PCI hotplug slot handling use-after-free | 7.8CISA ADP v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53193 | Linux kernel Loongson-2 clock driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53192 | Linux kernel Loongson-2 clock driver buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53191 | Linux kernel ath12k Wi-Fi driver unbind handling double free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53190 | Linux kernel rtlwifi efuse read routine denial of service | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53189 | Linux kernel nl80211 scheduled scan channel list vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53188 | Linux kernel ath12k Wi-Fi driver unbind handling null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53187 | Linux kernel io_uring integer overflow | 5.5NVD v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53186 | Linux kernel ksmbd connection handling use-after-free | 9.8CNA v3.1 | 0.5% | 2024-12-27 | Fix |
| CVE-2024-53185 | Linux kernel SMB client encryption cipher negotiation null pointer dereference | 7.5CNA v3.1 | 0.5% | 2024-12-27 | Fix |
| CVE-2024-53184 | Linux kernel ubd crash | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53183 | Linux kernel UML network driver release handler vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53182 | Linux kernel use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53181 | Linux kernel vector crash | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53180 | Linux kernel ALSA PCM mmap fault handler null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53179 | Linux kernel SMB client session signing key use-after-free | 9.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-53178 | Linux kernel SMB cached directory reconnect memory leak | 7.5CNA v3.1 | 0.5% | 2024-12-27 | Fix |
| CVE-2024-53177 | Linux kernel SMB cached directory open use-after-free | 9.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-53176 | Linux kernel SMB cached directory unmount race condition | 9.8CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-53175 | Linux kernel ipc memory leak | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53174 | Linux kernel SunRPC cache handling use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53173 | Linux kernel NFSv4 asynchronous open use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53172 | Linux kernel UBI fastmap attach vulnerability | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53171 | Linux kernel UBIFS TNC commit use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53170 | Linux kernel block use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-53169 | Linux kernel NVMe fabrics keep-alive race condition | 9.8CNA v3.1 | 0.5% | 2024-12-27 | Fix |
| CVE-2024-53168 | Linux kernel SunRPC TCP transport use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53167 | Linux kernel NFS block layout driver null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-12-27 | Fix |
| CVE-2024-53166 | Linux kernel BFQ I/O scheduler use-after-free | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53165 | Linux kernel intc use-after-free | 7.4CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-53164 | Linux kernel qdisc backlog accounting vulnerability | 7.8CNA v3.1 | 0.3% | 2024-12-27 | Fix |
| CVE-2024-50945 | SimplCommerce at commit An improper access control | 7.5CISA ADP v3.1 | 0.6% | 2024-12-27 | Exploit code |
| CVE-2024-50944 | SimplCommerce at commit integer overflow | 9.8CISA ADP v3.1 | 1.0% | 2024-12-27 | Exploit code |
| CVE-2024-50717 | Smarts-srl Smart Agent SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2024-12-27 | |
| CVE-2024-50716 | Smarts-srl Smart Agent SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2024-12-27 | |
| CVE-2024-50715 | Smarts-srl Smart Agent code injection | 7.5CISA ADP v3.1 | 1.4% | 2024-12-27 | |
| CVE-2024-50714 | smarts-srl.com Smart Agent v.1.1.0 server-side request forgery | 7.5CISA ADP v3.1 | 0.6% | 2024-12-27 | |
| CVE-2024-50713 | Smarts-srl Smart Agent SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-12-27 | |
| CVE-2024-39025 | Letta (previously MemGPT) incorrect access control vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2024-12-27 | |
| CVE-2024-12991 | Beijing Longda Jushang Technology DBShop商城系统 home-order cross-site scripting | 5.3CNA v4.0 | 0.3% | 2024-12-27 | |
| CVE-2024-12990 | ruifang-tech Rebuild Admin Verification page admin-verify redirect | 5.3CNA v4.0 | 0.3% | 2024-12-27 | |
| CVE-2024-12989 | WISI Tangram GT31 HTTP request server-side request forgery | 6.9CNA v4.0 | 0.4% | 2024-12-27 | |
| CVE-2024-12988 | Netgear R6900P/R7000P HTTP header sub_16C4C buffer overflow | 7.5v3.1 | 0.9% | 2024-12-27 | |
| CVE-2024-12987 | DrayTek Vigor Routers OS command injection | 9.8v3.1 | 98.2% | 2024-12-27 | KEVNucleiEmerging ThreatsFix |
| CVE-2024-12986 | DrayTek Vigor2960/Vigor300B Web Management interface apmcfgupptim os command injection | 9.8v3.1 | 35.3% | 2024-12-27 | Exploit code |
| CVE-2024-12985 | Overtek OT-E801G passwd os command injection | 5.3CNA v4.0 | 1.9% | 2024-12-27 | |
| CVE-2024-12984 | Amcrest IP2M-841B Web interface webCapsConfig information disclosure | 6.9CNA v4.0 | 0.6% | 2024-12-27 | |
| CVE-2024-12983 | code-projects Hospital Management System manage-doctors.php cross-site scripting | 5.2v3.1 | 0.5% | 2024-12-27 | |
| CVE-2024-12982 | PHPGurukul Blood Bank and Donor Management System update-contactinfo.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-12-27 | |
| CVE-2024-12981 | CodeAstro Car Rental System bookingconfirm.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-27 | |
| CVE-2024-12980 | code-projects Job Recruitment _all_edits.php fln_update cross-site scripting | 6.1v3.1 | 0.5% | 2024-12-27 | |
| CVE-2024-12979 | code-projects Job Recruitment _all_edits.php cn_update cross-site scripting | 6.1v3.1 | 0.5% | 2024-12-27 | |
| CVE-2024-12978 | code-projects Job Recruitment _all_edits.php add_req SQL injection | 7.5v3.1 | 0.7% | 2024-12-27 | |
| CVE-2024-12977 | PHPGurukul Complaint Management System state.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-27 | |
| CVE-2024-12976 | CodeZips Hospital Management System staff.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-27 | |
| CVE-2024-12856 | Four-Faith Industrial Router adjust_sys_time OS command injection | 7.2CNA v3.1 | 84.1% | 2024-12-27 | Reported exploitedEmerging ThreatsExploit code |
| CVE-2024-11921 | GiveWP reflected cross-site scripting | 4.8CISA ADP v3.1 | 0.8% | 2024-12-27 | NucleiFix |
| CVE-2024-11842 | DN Shipping by Weight for WooCommerce WordPress plugin settings update via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2024-11645 | Float Block WordPress plugin Admin+ stored XSS via widget | 4.8CISA ADP v3.1 | 0.4% | 2024-12-27 | |
| CVE-2024-11644 | WP-SVG WordPress plugin Contributor+ stored XSS via shortcode | 5.9CISA ADP v3.1 | 0.4% | 2024-12-27 | |
| CVE-2024-11605 | wp-publications uploaded filenames stored cross-site scripting | 4.8CISA ADP v3.1 | 1.2% | 2024-12-27 | Exploit code |
| CVE-2024-9774 | Python-sql: Python-sql unary operators does not escape non-expression | 6.5CNA v3.0 | 0.7% | 2024-12-27 | Fix |
| CVE-2024-3393 | Palo Alto Networks PAN-OS malicious DNS packet vulnerability | 8.7CNA v4.0 | 29.1% | 2024-12-27 | KEVFix |
| CVE-2024-56510 | marp-team marp-core marp Core allows XSS by improper neutralization of HTML sanitization | 5.3CNA v3.1 | 0.3% | 2024-12-26 | Fix |
| CVE-2024-56433 | shadow-maint shadow-utils insecure default initialization | 3.6CNA v3.1 | 0.4% | 2024-12-26 | Exploit codeFix |
| CVE-2024-56361 | Stored cross-site scripting (XSS) in lgsl | 5.3CNA v4.0 | 0.5% | 2024-12-26 | Fix |
| CVE-2024-55950 | Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby | 8.6CNA v4.0 | 0.3% | 2024-12-26 | Fix |
| CVE-2024-54907 | TOTOLINK A3002R code injection | 8.8CISA ADP v3.1 | 1.1% | 2024-12-26 | |
| CVE-2024-53850 | The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation | 8.2CNA v3.1 | 0.5% | 2024-12-26 | Fix |
| CVE-2024-51540 | Dell ECS integer overflow | 8.1CNA v3.1 | 0.4% | 2024-12-26 | Fix |
| CVE-2024-47157 | Honor Magic OS incorrect authorization | 2.9CNA v3.1 | 0.1% | 2024-12-26 | Fix |
| CVE-2024-47156 | Information leak vulnerability in Honor Product | 3.3CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47155 | Honor Magic OS observable discrepancy | 5.5CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47154 | Honor Magic OS observable discrepancy | 5.5CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47153 | Honor Magic OS observable discrepancy | 6.2CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47151 | Honor Magic OS unrestricted file upload | 6.3CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47150 | Honor Magic OS observable discrepancy | 3.3CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47149 | Honor Magic OS observable discrepancy | 3.3CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-47148 | Honor Magic OS incorrect authorization | 4.0CNA v3.1 | 0.1% | 2024-12-26 | Fix |
| CVE-2024-45805 | OpenCTI leaks support information due to inadequate access control | 4.3CNA v3.1 | 0.3% | 2024-12-26 | Fix |
| CVE-2024-45600 | Fields GLPI plugin has an authenticated SQL injection | 7.7CNA v3.1 | 0.5% | 2024-12-26 | Fix |
| CVE-2024-12969 | code-projects Hospital Management System Login index.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12968 | code-projects Job Recruitment _all_edits.php edit_jobpost SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12967 | code-projects Job Recruitment _all_edits.php fln_update SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12966 | code-projects Job Recruitment _all_edits.php cn_update SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12965 | 1000 Projects Portfolio Management System MCA update_ex_detail.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12964 | 1000 Projects Daily College Class Work Report Book login.php SQL injection | 9.8v3.1 | 0.5% | 2024-12-26 | |
| CVE-2024-12963 | code-projects Job Recruitment _all_edits.php add_xp SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12962 | code-projects Job Recruitment _all_edits.php SQL injection | 7.5v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12961 | 1000 Projects Portfolio Management System MCA update_ach_details.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12960 | 1000 Projects Portfolio Management System MCA update_edu_details.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-26 | |
| CVE-2024-12959 | 1000 Projects Portfolio Management System MCA update_personal_details.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-26 | |
| CVE-2024-12958 | 1000 Projects Portfolio Management System MCA update_pro_details.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-26 | |
| CVE-2024-12956 | 1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12955 | PHPGurukul Blood Bank and Donor Management System logout.php cross-site request forgery | 4.3v3.1 | 0.8% | 2024-12-26 | Exploit code |
| CVE-2024-12954 | 1000 Projects Portfolio Management System MCA update_ach.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12953 | 1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12952 | melMass comfy_mtb Dependency endpoint.py run_command code injection | 5.3CNA v4.0 | 0.5% | 2024-12-26 | |
| CVE-2024-12951 | 1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12950 | Code-projects/Projectworlds Travel Management System subcat.php SQL injection | 8.8v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12949 | code-projects Travel Management System package.php SQL injection | 8.8v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12948 | code-projects Travel Management System detail.php SQL injection | 8.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12947 | Codezips Hospital Management System invo.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12946 | 1000 Projects Attendance Tracking Management System admin_action.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12945 | code-projects Simple Car Rental System account.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12944 | CodeAstro House Rental Management System signin.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12943 | CodeAstro House Rental Management System ownersignup.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12942 | 1000 Projects Portfolio Management System MCA admin_login.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12941 | CodeAstro Blood Donor Management System deletedannounce.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-26 | |
| CVE-2024-12940 | 1000 Projects Attendance Tracking Management System student_action.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-26 | |
| CVE-2024-12939 | code-projects Job Recruitment _all_edits.php add_edu SQL injection | 7.5v3.1 | 0.5% | 2024-12-26 | |
| CVE-2024-12938 | code-projects Simple Admin Panel updateOrderStatus.php SQL injection | 9.1v3.1 | 0.5% | 2024-12-26 | |
| CVE-2024-12937 | code-projects Simple Admin Panel addVariationController.php SQL injection | 8.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12936 | code-projects Simple Admin Panel catDeleteController.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12935 | code-projects Simple Admin Panel editItemForm.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12934 | code-projects Simple Admin Panel updateItemController.php SQL injection | 8.8v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12933 | code-projects Simple Admin Panel updateItemController.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12932 | code-projects Simple Admin Panel addSizeController.php cross-site scripting | 4.6v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12931 | code-projects Simple Admin Panel addCatController.php SQL injection | 8.8v3.1 | 0.6% | 2024-12-26 | |
| CVE-2024-12930 | code-projects Simple Admin Panel addCatController.php cross-site scripting | 4.6v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12929 | code-projects Student Management System addCatController.php SQL injection | 8.8v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12928 | code-projects Simple Admin Panel SQL injection | 8.8v3.1 | 0.4% | 2024-12-26 | |
| CVE-2024-12908 | Delinea Secret Server code injection | 6.9CNA v3.1 | 0.7% | 2024-12-26 | Fix |
| CVE-2024-12652 | Intumit SmartRobot′s Conversational AI Platform improper control of generation of code | 8.8NVD v3.1 | 0.8% | 2024-12-26 | Fix |
| CVE-2024-11223 | WPForms WordPress plugin Admin+ stored XSS | 4.7CISA ADP v3.1 | 0.5% | 2024-12-26 | Fix |
| CVE-2024-10903 | Broken Link Checker WordPress plugin Admin+ SSRF | 4.7CISA ADP v3.1 | 0.4% | 2024-12-26 | Fix |
| CVE-2024-8994 | Honor Magic OS observable discrepancy | 6.2CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-8993 | Honor Magic OS observable discrepancy | 6.2CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-8992 | Honor Magic OS observable discrepancy | 4.0CNA v3.1 | 0.2% | 2024-12-26 | Fix |
| CVE-2024-56431 | Xiph Theora incorrect authorization | 9.8CISA ADP v3.1 | 1.8% | 2024-12-25 | Exploit codeFix |
| CVE-2024-56430 | OpenFHE null pointer dereference | 6.5CISA ADP v3.1 | 0.4% | 2024-12-25 | |
| CVE-2024-53291 | Dell NativeEdge information disclosure | 7.5CNA v3.1 | 0.3% | 2024-12-25 | Fix |
| CVE-2024-52906 | IBM AIX denial of service | 5.5CNA v3.1 | 0.1% | 2024-12-25 | Fix |
| CVE-2024-52543 | Dell NativeEdge insecure temporary file | 6.5CNA v3.1 | 0.2% | 2024-12-25 | Fix |
| CVE-2024-52535 | Dell SupportAssist for Home PCs symlink following | 7.1CNA v3.1 | 0.6% | 2024-12-25 | Fix |
| CVE-2024-52534 | Dell ECS authentication bypass by replay | 5.4CNA v3.1 | 0.3% | 2024-12-25 | Fix |
| CVE-2024-52046 | Apache Mina: Mina applications using unbounded deserialization may allow RCE | 10.0CNA v4.0 | 24.4% | 2024-12-25 | Fix |
| CVE-2024-47978 | Dell NativeEdge execution with unnecessary privileges | 7.8CNA v3.1 | 0.2% | 2024-12-25 | Fix |
| CVE-2024-47102 | IBM AIX denial of service | 5.5CNA v3.1 | 0.1% | 2024-12-25 | Fix |
| CVE-2024-39727 | IBM Engineering Insights reverse tabnabbing | 6.1CNA v3.1 | 0.3% | 2024-12-25 | Fix |
| CVE-2024-39725 | IBM Engineering Lifecycle Optimization Engineering Insights information disclosure | 5.3CNA v3.1 | 0.4% | 2024-12-25 | Fix |
| CVE-2024-12927 | 1000 Projects Attendance Tracking Management System check_faculty_login.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-25 | |
| CVE-2024-12926 | Codezips Project Management System advanced.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-25 | |
| CVE-2024-12636 | WP Legal Pages create_popup_delete_process function cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2024-12-25 | Fix |
| CVE-2024-12428 | WP Data Access App, Table, Form and Chart Builder WordPress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 0.5% | 2024-12-25 | Fix |
| CVE-2024-12413 | MarketKing WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-12-25 | Fix |
| CVE-2024-12335 | Avada Builder WordPress plugin authenticated (Contributor+) Protected post disclosure | 4.3CNA v3.1 | 0.4% | 2024-12-25 | Fix |
| CVE-2024-12272 | WP Travel Engine WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.8% | 2024-12-25 | Fix |
| CVE-2024-12190 | Contact Form by Bit Form: Multi Step Form WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.5% | 2024-12-25 | Fix |
| CVE-2024-12032 | Tourfic WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2024-12-25 | Fix |
| CVE-2024-11281 | WooCommerce Point of Sale WordPress plugin insecure direct object reference to privilege escalation | 9.8CNA v3.1 | 1.5% | 2024-12-25 | Fix |
| CVE-2024-10862 | NEX-Forms WordPress plugin authenticated (Admin+) SQL injection | 4.9CNA v3.1 | 0.6% | 2024-12-25 | Fix |
| CVE-2024-10858 | Jetpack Unauthenticated DOM-XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-12-25 | Exploit codeFix |
| CVE-2024-8950 | SQLi in Arne Informatics' Piramit Automation | 9.9CNA v3.1 | 0.6% | 2024-12-25 | Fix |
| CVE-2024-1609 | OPPO Store APP has a WebView component privilege escalation | 8.7CNA v4.0 | 0.5% | 2024-12-25 | |
| CVE-2024-53241 | Linux kernel Xen PV iret hypercall handling vulnerability | 5.5v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53240 | Linux kernel Xen netfront driver vulnerability | 5.7v3.1 | 0.6% | 2024-12-24 | Fix |
| CVE-2024-53163 | Linux kernel QAT 420xx firmware loader off-by-one error | 5.5v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53162 | Linux kernel QAT 4xxx firmware loader out-of-bounds read | 7.1v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53161 | Linux kernel EDAC BlueField driver integer overflow | 5.5v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53160 | Linux kernel RCU kvfree monitor timer race condition | 4.7v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53158 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() This loop is supposed to break if the frequency returned from clk_round_rate() is the same as on the previous iteration. However, that check doesn't make sense on t | 5.5v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53157 | Linux kernel ARM SCPI DVFS driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53156 | Linux kernel ath9k HTC endpoint connect vulnerability | 7.8v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53155 | Linux kernel ocfs2 file read vulnerability | 7.1v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53154 | Linux kernel clk-apple-nco null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53153 | Linux kernel qcom-ep crash | 5.5v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53152 | Linux kernel Tegra194 PCIe endpoint driver denial of service | 5.5v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53151 | Linux kernel SVCRDMA write chunk parsing integer overflow | 7.5CNA v3.1 | 0.6% | 2024-12-24 | Fix |
| CVE-2024-53150 | Linux Kernel out-of-bounds read | 7.1v3.1 | 1.4% | 2024-12-24 | KEVFix |
| CVE-2024-53149 | Linux kernel USB Type-C UCSI glink driver off-by-one error | 4.6v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53148 | Linux kernel comedi driver buffer mapping vulnerability | 7.8CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-53147 | Linux kernel exFAT filesystem out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-53146 | Linux kernel NFSD callback decoding integer overflow | 9.1CNA v3.1 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-53145 | Linux kernel um integer overflow | 5.5v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-47515 | Pagure: Generate_archive follows symbolic links in temporary clones | 8.1CNA v3.1 | 0.6% | 2024-12-24 | Fix |
| CVE-2024-43441 | Apache HugeGraph-Server: Fixed JWT Token(Secret) | 9.8CISA ADP v3.1 | 72.8% | 2024-12-24 | NucleiFix |
| CVE-2024-41887 | Hanwha Vision XRN-420S arbitrary file overwrite | 5.1CNA v4.0 | 1.2% | 2024-12-24 | Fix |
| CVE-2024-41886 | Hanwha Vision XRN-420S improper input validation | 6.9CNA v4.0 | 0.6% | 2024-12-24 | Fix |
| CVE-2024-41885 | Hanwha Vision XRN-420S hardcoding sensitive information | 5.6CNA v4.0 | 0.2% | 2024-12-24 | Fix |
| CVE-2024-41884 | Hanwha Vision XRN-420S null pointer dereference | 6.9CNA v4.0 | 0.8% | 2024-12-24 | Fix |
| CVE-2024-41883 | Hanwha Vision XRN-420S null pointer dereference | 6.9CNA v4.0 | 0.6% | 2024-12-24 | Fix |
| CVE-2024-41882 | Hanwha Vision XRN-420S stack based buffer overflow | 6.9CNA v4.0 | 0.8% | 2024-12-24 | Fix |
| CVE-2024-12881 | giuse PlugVersions missing authorization | 8.8CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12850 | Database Backup and check Tables Automated With Scheduler 2024 WordPress plugin arbitrary file read | 4.9CNA v3.1 | 0.9% | 2024-12-24 | Fix |
| CVE-2024-12814 | Loan Comparison WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12746 | SQL injection in the Amazon Redshift ODBC Driver affecting | 8.6CNA v4.0 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-12745 | SQL injection in the Amazon Redshift Python Connector affecting | 8.6CNA v4.0 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-12744 | SQL injection in the Amazon Redshift JDBC Driver affecting | 8.6CNA v4.0 | 0.6% | 2024-12-24 | Fix |
| CVE-2024-12710 | WP-Appbox WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12622 | WordPress Simple Shopping Cart plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12617 | WC Price History for Omnibus WordPress plugin missing authorization | 5.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-12594 | zia-imtiaz Login Page Styler lps_generate_temp_access_url action missing authorization | 8.8CNA v3.1 | 0.7% | 2024-12-24 | Exploit codeFix |
| CVE-2024-12582 | Red Hat Service Interconnect skupper console authentication authentication bypass | 7.1CNA v3.1 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-12518 | shMapper by Teplitsa WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-12507 | Optio Dentistry WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12468 | WP Datepicker WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-12405 | Export Customers Data WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-12268 | Responsive Blocks WordPress Gutenberg Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-12266 | ELEX WooCommerce Dynamic Pricing and Discounts WordPress plugin missing authorization | 6.5CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12210 | Print Invoice and Delivery Notes for WooCommerce WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-12103 | Content No Cache: prevent specific content from being cached WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12100 | Bitcoin Lightning Publisher for WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-12096 | Exhibit to WP Gallery WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2024-12-24 | |
| CVE-2024-12034 | Advanced Google reCAPTCHA WordPress plugin brute force Protection IP Unblock | 5.3CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-12031 | Advanced Floating Content WordPress plugin authenticated (Subscriber+) SQL injection | 6.5CNA v3.1 | 0.4% | 2024-12-24 | Fix |
| CVE-2024-11896 | Text Prompter WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-11885 | NinjaTeam Chat for Telegram WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-11726 | Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-10856 | Booking Calendar WpDevArt WordPress plugin authenticated (Contributor+) SQL injection | 6.5CNA v3.1 | 0.5% | 2024-12-24 | Fix |
| CVE-2024-10584 | DirectoryPress WordPress plugin authenticated (Author+) stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-9427 | Koji: Escape html tag characters in the query string | 5.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-8721 | Tracking Code Manager WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-24 | Fix |
| CVE-2024-56378 | Freedesktop Poppler out-of-bounds read | 4.3CISA ADP v3.1 | 0.6% | 2024-12-23 | Fix |
| CVE-2024-56364 | SimpleXLSX toHTMLEx method cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-12-23 | Fix |
| CVE-2024-56363 | APTRS Jinja2 template rendering server-side template injection | 7.8CNA v3.1 | 0.3% | 2024-12-23 | |
| CVE-2024-56362 | Navidrome Stores JWT Secret in Plaintext in navidrome.db | 7.1CNA v3.1 | 0.2% | 2024-12-23 | Fix |
| CVE-2024-56326 | Jinja has a sandbox breakout through indirect reference to format method | 5.4CNA v4.0 | 0.5% | 2024-12-23 | Fix |
| CVE-2024-56201 | Jinja has a sandbox breakout through malicious filenames | 5.4CNA v4.0 | 0.3% | 2024-12-23 | Fix |
| CVE-2024-55947 | Gogs has a path traversal in file update API | 8.7CNA v4.0 | 77.8% | 2024-12-23 | Exploit codeKCVFix |
| CVE-2024-55539 | Acronis Cyber Protect Cloud Agent weak cryptographic algorithm | 2.5CNA v3.0 | 0.1% | 2024-12-23 | Fix |
| CVE-2024-54148 | Gogs has a path traversal in file editing UI | 8.7CNA v4.0 | 0.9% | 2024-12-23 | Fix |
| CVE-2024-54082 | Sharp home 5G HR02 OS command injection | 7.2CNA v3.0 | 1.2% | 2024-12-23 | |
| CVE-2024-53961 | Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal) | 8.1CNA v3.1 | 14.1% | 2024-12-23 | Fix |
| CVE-2024-53276 | GHSL-2024-092: Open CORS policy in home-gallery | 6.3CNA v4.0 | 0.6% | 2024-12-23 | |
| CVE-2024-53275 | GHSL-2024-091: DNS rebinding attack in home-gallery | 5.3CNA v4.0 | 0.3% | 2024-12-23 | |
| CVE-2024-53256 | Rizin has a command injection via RzBinInfo bclass due legacy code | 7.8CNA v3.1 | 1.2% | 2024-12-23 | Fix |
| CVE-2024-52321 | Sharp home 5G HR02 system information disclosure | 5.9CNA v3.0 | 0.5% | 2024-12-23 | |
| CVE-2024-47864 | Sharp home 5G HR02 buffer overflow | 5.3CNA v3.0 | 0.6% | 2024-12-23 | |
| CVE-2024-46873 | Sharp home 5G HR02 active debug code | 9.8CNA v3.0 | 0.7% | 2024-12-23 | |
| CVE-2024-45721 | Sharp home 5G HR02 OS command injection | 7.2CNA v3.0 | 1.2% | 2024-12-23 | |
| CVE-2024-45387 | Apache Traffic Control: SQL injection in Traffic Ops endpoint PUT deliveryservice_request_comments | 9.9CNA v3.1 | 42.2% | 2024-12-23 | Fix |
| CVE-2024-40896 | libxml2 XML external entity injection | 9.1CISA ADP v3.1 | 1.2% | 2024-12-23 | Fix |
| CVE-2024-23945 | Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails | 5.9CISA ADP v3.1 | 1.6% | 2024-12-23 | Fix |
| CVE-2024-12903 | Incorrect default permissions in Biamp Evoko Home | 7.8CNA v3.1 | 0.2% | 2024-12-23 | |
| CVE-2024-12902 | Global Wisdom Software ANCHOR Undocumented Privileged Account | 8.4CNA v3.1 | 0.2% | 2024-12-23 | Fix |
| CVE-2024-12901 | FoxCMS API Endpoint Site.php improper authorization | 6.9CNA v4.0 | 0.6% | 2024-12-23 | |
| CVE-2024-12900 | FoxCMS Configuration file installdb.php code injection | 9.8v3.1 | 0.7% | 2024-12-23 | |
| CVE-2024-12899 | 1000 Projects Attendance Tracking Management System course_action.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-23 | |
| CVE-2024-12898 | 1000 Projects Attendance Tracking Management System faculty_action.php SQL injection | 9.8v3.1 | 0.5% | 2024-12-23 | |
| CVE-2024-12897 | Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal | 5.3CNA v4.0 | 0.5% | 2024-12-23 | |
| CVE-2024-11230 | Elementor Header and Footer Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-23 | Fix |
| CVE-2024-56375 | NICMx FORT-validator integer underflow | 7.5CISA ADP v3.1 | 0.5% | 2024-12-22 | Fix |
| CVE-2024-56314 | Vanderbilt REDCap Project name stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-12-22 | |
| CVE-2024-56313 | Vanderbilt REDCap Calendar feature stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-12-22 | |
| CVE-2024-56312 | Vanderbilt REDCap Project Dashboard name stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2024-12-22 | |
| CVE-2024-56311 | Vanderbilt REDCap cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-12-22 | |
| CVE-2024-56310 | Vanderbilt REDCap cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-12-22 | |
| CVE-2024-12896 | Intelbras VIP S4320 G2 Web interface webCapsConfig information disclosure | 6.9CNA v4.0 | 0.5% | 2024-12-22 | |
| CVE-2024-12895 | TreasureHuntGame TreasureHunt checkflag.php console_log SQL injection | 9.8v3.1 | 0.6% | 2024-12-22 | |
| CVE-2024-12894 | TreasureHuntGame TreasureHunt acesso.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-22 | |
| CVE-2024-12893 | Portabilis i-Educar Tipo de Usuário page 2 cross-site scripting | 5.4v3.1 | 0.5% | 2024-12-22 | |
| CVE-2024-12892 | code-projects Online Exam Mastering System sign.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-22 | |
| CVE-2024-12891 | code-projects Online Exam Mastering System account.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-22 | |
| CVE-2024-12890 | code-projects Online Exam Mastering System update.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-22 | |
| CVE-2024-11852 | Element Pack Elementor Addons WordPress plugin missing authorization | 4.3CNA v3.1 | 0.4% | 2024-12-22 | Fix |
| CVE-2024-51464 | IBM i authentication bypass | 4.3CNA v3.1 | 1.4% | 2024-12-21 | Exploit codeFix |
| CVE-2024-51463 | IBM i server-side request forgery | 5.4CNA v3.1 | 0.9% | 2024-12-21 | Exploit codeFix |
| CVE-2024-12884 | Codezips E-Commerce Website login.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-21 | |
| CVE-2024-12883 | code-projects Job Recruitment _email.php cross-site scripting | 6.1v3.1 | 0.8% | 2024-12-21 | |
| CVE-2024-12875 | Easy Digital Downloads WordPress plugin authenticated (Admin+) arbitrary file download | 4.9CNA v3.1 | 1.0% | 2024-12-21 | Fix |
| CVE-2024-12846 | Emlog Pro link.php cross-site scripting | 4.8v3.1 | 0.4% | 2024-12-21 | |
| CVE-2024-12771 | eCommerce Product Catalog Plugin for WordPress cross-site request forgery to password reset | 8.8CNA v3.1 | 0.3% | 2024-12-21 | Fix |
| CVE-2024-12721 | Custom Product Tabs For WooCommerce WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.7% | 2024-12-21 | Fix |
| CVE-2024-12697 | real.Kit WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-21 | |
| CVE-2024-12635 | WP Docs WordPress plugin authenticated (Subscriber+) time-based SQL injection via dir_id | 6.5v3.1 | 0.4% | 2024-12-21 | Fix |
| CVE-2024-12591 | MagicPost WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-21 | Fix |
| CVE-2024-12588 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-21 | Fix |
| CVE-2024-12558 | WP BASE Booking of Appointments, Services and Events WordPress plugin unauthorized access | 6.5CNA v3.1 | 1.3% | 2024-12-21 | Exploit codeFix |
| CVE-2024-12408 | WP on AWS WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-21 | Fix |
| CVE-2024-12262 | Ebook Store WordPress plugin reflected cross-site scripting via step | 6.1CNA v3.1 | 0.5% | 2024-12-21 | Fix |
| CVE-2024-12066 | SMSA Shipping(official) WordPress plugin authenticated (Subscriber+) arbitrary file deletion | 8.8CNA v3.1 | 0.9% | 2024-12-21 | Fix |
| CVE-2024-11977 | kk Star Ratings shortcode execution handler code injection | 7.3CNA v3.1 | 0.6% | 2024-12-21 | Fix |
| CVE-2024-11975 | Reactflow Visitor Recording and Heatmaps WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-12-21 | |
| CVE-2024-11938 | One Click Upsell Funnel for WooCommerce WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-21 | Fix |
| CVE-2024-11808 | Pingmeter Uptime Monitoring WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-21 | |
| CVE-2024-11722 | Frontend Admin by DynamiApps WordPress plugin unauthenticated SQL injection | 5.9CNA v3.1 | 0.6% | 2024-12-21 | Fix |
| CVE-2024-11688 | LaTeX2HTML WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-21 | Fix |
| CVE-2024-11682 | G Web Pro Store Locator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-21 | |
| CVE-2024-11607 | GTPayment Donations WordPress plugin stored XSS via CSRF | 6.1CISA ADP v3.1 | 0.2% | 2024-12-21 | |
| CVE-2024-11349 | AdForest WordPress theme authentication bypass | 9.8CNA v3.1 | 1.2% | 2024-12-21 | Fix |
| CVE-2024-11287 | Ebook Store WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-21 | Fix |
| CVE-2024-11196 | Multi-column Tag Map WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.5% | 2024-12-21 | Fix |
| CVE-2024-10797 | Full Screen Menu for Elementor WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-21 | |
| CVE-2024-10453 | Elementor Website Builder More than Just a Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-21 | Fix |
| CVE-2024-9545 | Shortcodes and extra features for Phlox WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-21 | Fix |
| CVE-2024-56359 | Cross-site scripting vulnerability through HyperLink cells in grist-core | 8.1CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56358 | Cross-site scripting vulnerability through svg attachment previews in grist-core | 8.1CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56357 | Cross-site scripting vulnerability through custom widget URLs and form redirect URLs in grist-core | 8.1CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56356 | JetBrains TeamCity XML external entity injection | 5.9CNA v3.1 | 0.2% | 2024-12-20 | Fix |
| CVE-2024-56355 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.8% | 2024-12-20 | Fix |
| CVE-2024-56354 | JetBrains TeamCity insufficiently protected credentials | 5.5CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56353 | JetBrains TeamCity improper removal of sensitive information | 5.5CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56352 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.8% | 2024-12-20 | Fix |
| CVE-2024-56351 | JetBrains TeamCity insufficient session expiration | 6.3CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56350 | JetBrains TeamCity incorrect authorization | 4.3CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56349 | JetBrains TeamCity missing authorization | 5.3CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56348 | JetBrains TeamCity incorrect authorization | 4.3CNA v3.1 | 0.3% | 2024-12-20 | Exploit codeFix |
| CVE-2024-56337 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation mitigation was incomplete | 9.8CISA ADP v3.1 | 9.0% | 2024-12-20 | Reported exploitedFix |
| CVE-2024-56335 | vaultwarden organization groups API improper authorization | 7.6CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-56334 | Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation | 7.8CNA v3.1 | 0.7% | 2024-12-20 | Fix |
| CVE-2024-56333 | InseeFrLab onyxia remote code execution in onyxia-api | 9.4CNA v4.0 | 0.7% | 2024-12-20 | Fix |
| CVE-2024-56331 | Local file inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor | 6.8CNA v3.1 | 1.8% | 2024-12-20 | NucleiExploit codeFix |
| CVE-2024-56330 | Session VNC may be accessed by other sessions on the same host in stardust | 9.3CNA v4.0 | 0.5% | 2024-12-20 | Fix |
| CVE-2024-56329 | Account takeover vulnerability in Social Account Linking in joelbutcher/socialstream | 8.9CNA v4.0 | 0.6% | 2024-12-20 | Fix |
| CVE-2024-55509 | CodeAstro Complaint Management System SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2024-12-20 | |
| CVE-2024-55471 | Oqtane Framework insecure direct object reference | 6.5CISA ADP v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-55470 | Oqtane Framework Incorrect access control vulnerability | 7.5CISA ADP v3.1 | 0.5% | 2024-12-20 | |
| CVE-2024-55342 | Piranha CMS cross-site scripting | 4.7CISA ADP v3.1 | 0.5% | 2024-12-20 | |
| CVE-2024-55341 | Piranha CMS cross-site scripting | 4.7CISA ADP v3.1 | 0.5% | 2024-12-20 | |
| CVE-2024-55186 | Oqtane Framework insecure direct object reference | 4.3CISA ADP v3.1 | 0.3% | 2024-12-20 | |
| CVE-2024-54538 | Apple macOS resource exhaustion | 7.5v3.1 | 1.0% | 2024-12-20 | Fix |
| CVE-2024-51466 | IBM Cognos Analytics expression language injection | 9.0CNA v3.1 | 0.6% | 2024-12-20 | Fix |
| CVE-2024-44298 | Apple macOS insecure storage of sensitive information | 3.3NVD v3.1 | 0.2% | 2024-12-20 | Fix |
| CVE-2024-44293 | Apple macOS cross-site request forgery | 5.5v3.1 | 0.1% | 2024-12-20 | Fix |
| CVE-2024-44292 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2024-12-20 | Fix |
| CVE-2024-44231 | Apple macOS Login Window authentication bypass | 4.6NVD v3.1 | 0.5% | 2024-12-20 | Fix |
| CVE-2024-44223 | Apple macOS improper preservation of permissions | 4.6v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-44211 | Apple macOS improper preservation of permissions | 5.5NVD v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-44195 | Apple macOS path traversal | 7.5v3.1 | 0.7% | 2024-12-20 | Fix |
| CVE-2024-40875 | Cross-site scripting vulnerability in the Secure Access administrative console | 5.9CNA v4.0 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-40695 | IBM Cognos Analytics file upload | 8.0CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-37758 | endpoint /RoleMenuMapping/AddRoleMenu of Digiteam v4.21.0.0 improper access control | 8.8CISA ADP v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-28767 | IBM Security Directory Integrator command execution | 6.8CNA v3.1 | 0.7% | 2024-12-20 | Fix |
| CVE-2024-21549 | Browsershot improper input validation | 7.7CNA v4.0 | 0.6% | 2024-12-20 | Fix |
| CVE-2024-12867 | Arctic Hub URL Mapper server-side request forgery | 8.8CNA v4.0 | 0.5% | 2024-12-20 | |
| CVE-2024-12845 | Emlog Pro common.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-12844 | Emlog Pro store.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-12843 | Emlog Pro plugin.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-12842 | Emlog Pro user.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-12841 | Emlog Pro tag.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-12832 | Arista NG Firewall ReportEntry SQL injection arbitrary file read and Write | 6.3NVD v3.1 | 0.5% | 2024-12-20 | |
| CVE-2024-12831 | Arista NG Firewall uvm_login incorrect authorization privilege escalation | 7.8v3.1 | 0.2% | 2024-12-20 | |
| CVE-2024-12830 | Arista NG Firewall custom_handler directory traversal remote code execution | 7.3v3.1 | 1.0% | 2024-12-20 | |
| CVE-2024-12829 | Arista NG Firewall ExecManagerImpl command injection remote code execution | 8.8v3.1 | 1.3% | 2024-12-20 | |
| CVE-2024-12678 | Nomad Allocations vulnerable to privilege escalation within A Namespace | 6.5CNA v3.1 | 0.5% | 2024-12-20 | Fix |
| CVE-2024-12677 | Delta Electronics DTM Soft deserialization of untrusted data | 8.5CNA v4.0 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-12571 | Store Locator WordPress plugin unauthenticated local file inclusion | 9.8CNA v3.1 | 0.9% | 2024-12-20 | |
| CVE-2024-12509 | Embed Twine WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-20 | |
| CVE-2024-12506 | NACC WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-12014 | Lleidanet PKI eSigna path traversal vulnerability in eSignaViewer allow Unauthorized File Access | 2.0CNA v4.0 | 0.4% | 2024-12-20 | |
| CVE-2024-11893 | Spoki Chat Buttons and WooCommerce Notifications WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-11878 | Category Post Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-20 | |
| CVE-2024-11812 | Wtyczka SeoPilot dla WP WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2024-12-20 | |
| CVE-2024-11811 | Feedify Web Push Notifications WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-11806 | PKT1 Centro de envios WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-11784 | Sell Tickets Online TicketSource Ticket Shop for WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-11783 | Financial Calculator WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-20 | |
| CVE-2024-11776 | PCRecruiter Extensions WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-11775 | Particle Background WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-20 | |
| CVE-2024-11774 | Outdooractive Embed WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-11411 | Spotlightr WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-11331 | استخراج محصولات ووکامرس برای آیسی WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-11297 | Page Restriction WordPress (WP) WordPress plugin information disclosure | 7.5v3.1 | 0.6% | 2024-12-20 | Fix |
| CVE-2024-11108 | Serious Slider WordPress plugin Contributor+ stored XSS via shortcode | 5.4CISA ADP v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-10706 | Download Manager WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-10555 | MaxButtons WordPress plugin Admin+ stored XSS via Button Width | 4.8CISA ADP v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-10385 | Stored XSS in DirectAdmin Evo Skin | 8.6CNA v4.0 | 0.7% | 2024-12-20 | Fix |
| CVE-2024-9619 | WP SHAPES WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload | 6.4CNA v3.1 | 0.3% | 2024-12-20 | |
| CVE-2024-9503 | Maintenance and Coming Soon Redirect Animation WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-20 | Fix |
| CVE-2024-8968 | MaxButtons WordPress plugin Admin+ stored XSS via Text Color | 4.7CISA ADP v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2024-7726 | Arbitrary code execution via exposed JTAG port in Kioxia CM6, PM6, PM7 | 6.8CISA ADP v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-5955 | Trellix ePO Onprem Sp1 Update4 cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-12-20 | |
| CVE-2024-56327 | Malicious plugin names, recipients, or identities can cause arbitrary binary execution in pyrage | 7.7CNA v4.0 | 0.5% | 2024-12-19 | Fix |
| CVE-2024-56200 | Uncontrolled recursion and Asymmetric resource consumption in Altair media/file proxy | 8.6CNA v3.1 | 0.6% | 2024-12-19 | |
| CVE-2024-56159 | withastro astro server source code is exposed to the public if sourcemaps are enabled | 7.8CNA v4.0 | 1.5% | 2024-12-19 | NucleiFix |
| CVE-2024-55603 | Insufficient session invalidation in Kanboard | 6.5CNA v3.1 | 0.5% | 2024-12-19 | Fix |
| CVE-2024-55196 | GoPhish sends cleartext passwords | 7.5CISA ADP v3.1 | 0.4% | 2024-12-19 | |
| CVE-2024-55082 | Stirling-PDF url-to-pdf endpoint server-side request forgery | 7.5CISA ADP v3.1 | 0.5% | 2024-12-19 | |
| CVE-2024-55081 | component /datagrip/upload of Chat2DB v0.3.5 An XML external entity injection | 9.8CISA ADP v3.1 | 0.8% | 2024-12-19 | |
| CVE-2024-54984 | Quectel BG96 NAS message handling missing authentication | 9.8CISA ADP v3.1 | 0.5% | 2024-12-19 | |
| CVE-2024-54983 | Quectel BC95-CNV NAS message handling missing authentication | 9.8CISA ADP v3.1 | 0.5% | 2024-12-19 | |
| CVE-2024-54982 | Quectel BC25 NAS message handling authentication bypass | – | 0.2% | 2024-12-19 | |
| CVE-2024-54790 | PHPGurukul Pre-School Enrollment System SQL injection | 7.5CISA ADP v3.1 | 0.7% | 2024-12-19 | |
| CVE-2024-54663 | Synacor Zimbra Collaboration Suite inclusion of untrusted functionality | 7.5CISA ADP v3.1 | 0.6% | 2024-12-19 | Fix |
| CVE-2024-54150 | cjwt JWT signature verification vulnerability | 8.7CNA v4.0 | 0.4% | 2024-12-19 | Fix |
| CVE-2024-54009 | HPE Alletra Storage MP B10000 Remote authentication bypass | 4.0CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-53991 | Potential Backup file leaked via Nginx in Discourse | 7.5CNA v3.1 | 29.9% | 2024-12-19 | NucleiEmerging ThreatsFix |
| CVE-2024-52897 | IBM MQ information disclosure | 6.2CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-52896 | IBM MQ information disclosure | 6.2CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-52794 | Magnific lightbox susceptible to cross-site scripting in Discourse | 6.8CNA v3.1 | 0.3% | 2024-12-19 | Exploit codeFix |
| CVE-2024-52589 | Discourse screened emails list information disclosure | 2.2CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-51532 | Dell PowerStore argument injection | 7.1CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-51471 | IBM MQ Appliance denial of service | 5.3CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-49765 | Bypass of Discourse Connect using other login paths if enabled in Discourse | 5.3CNA v3.1 | 0.4% | 2024-12-19 | Fix |
| CVE-2024-49336 | IBM Security Guardium server-side request forgery | 6.5CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-47093 | Nagvis fix various XSS issues and potential RCE | 8.8CNA v3.1 | 0.5% | 2024-12-19 | Fix |
| CVE-2024-45819 | Xen libxl leaks data to PVH guests via ACPI tables | 5.5CISA ADP v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-45818 | Xen deadlock in x86 HVM standard VGA handling | 6.5CISA ADP v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-38864 | Checkmk User-Readable Private Key in Windows agent | 4.8CNA v4.0 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-38819 | Spring Framework path traversal | 7.5CNA v3.1 | 56.0% | 2024-12-19 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-37962 | Fusion Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-35141 | IBM Security Verify Access privilege escalation | 7.8CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-25131 | Openshift-dedicated: Must-gather-operator: Yaml template injection leads to privilege escalation | 8.8CNA v3.1 | 0.8% | 2024-12-19 | Fix |
| CVE-2024-12801 | QOS.CH Sarl logback SaxEventRecorder vulnerable to server-side request forgery (SSRF) attacks | 2.4CNA v4.0 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-12798 | QOS.CH Logback-core expression language injection | 5.9CNA v4.0 | 0.5% | 2024-12-19 | Fix |
| CVE-2024-12794 | Codezips E-Commerce Site editorder.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-19 | |
| CVE-2024-12793 | PbootCMS IndexController.php path traversal | 4.3v3.1 | 0.5% | 2024-12-19 | |
| CVE-2024-12792 | Codezips E-Commerce Site newadmin.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-19 | |
| CVE-2024-12791 | Codezips E-Commerce Site signin.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-19 | |
| CVE-2024-12790 | code-projects Hostel Management Site room-details.php cross-site scripting | 8.2v3.1 | 0.6% | 2024-12-19 | |
| CVE-2024-12789 | PbootCMS IndexController.php code injection | 9.8v3.1 | 0.6% | 2024-12-19 | |
| CVE-2024-12788 | Codezips Technical Discussion Forum signinpost.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-19 | |
| CVE-2024-12787 | 1000 Projects Attendance Tracking Management System check_student_login.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-19 | |
| CVE-2024-12786 | X1a0He Adobe Downloader XPC Service privilege escalation | 8.5CNA v4.0 | 0.2% | 2024-12-19 | |
| CVE-2024-12785 | itsourcecode Vehicle Management System sendmail.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-19 | |
| CVE-2024-12784 | itsourcecode Vehicle Management System editbill.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-19 | |
| CVE-2024-12783 | itsourcecode Vehicle Management System billaction.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-19 | |
| CVE-2024-12782 | FUJIFILM Business Innovation Apeos C3070, C5570 and C6580 web interface improper authorization | 6.9CNA v4.0 | 0.8% | 2024-12-19 | |
| CVE-2024-12729 | Sophos Firewall User portal code injection | 8.8CNA v3.1 | 1.3% | 2024-12-19 | Fix |
| CVE-2024-12728 | Sophos Firewall weak credentials | 9.8CNA v3.1 | 0.9% | 2024-12-19 | Fix |
| CVE-2024-12727 | Sophos Firewall email protection feature SQL injection | 9.8CNA v3.1 | 1.4% | 2024-12-19 | Fix |
| CVE-2024-12700 | Tibbo AggreGate Network Manager unrestricted upload of file with dangerous type | 8.7CNA v4.0 | 0.6% | 2024-12-19 | Fix |
| CVE-2024-12672 | Rockwell Automation Arena DOE file parsing out-of-bounds write | 8.5CNA v4.0 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-12626 | AutomatorWP WordPress plugin reflected cross-site scripting via a-0-o-search_field_value | 9.6CNA v3.1 | 0.7% | 2024-12-19 | Fix |
| CVE-2024-12569 | Milestone Systems XProtect VMS Sensitive Information in Driver’s Log file | 5.2CNA v4.0 | 0.1% | 2024-12-19 | Fix |
| CVE-2024-12560 | Button Block WordPress plugin information disclosure | 6.5v3.1 | 0.4% | 2024-12-19 | Fix |
| CVE-2024-12331 | File Manager Pro WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-12175 | Rockwell Automation code execution vulnerability in Arena | 8.5CNA v4.0 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-12121 | Broken Link Checker Finder WordPress plugin blind server-side request forgery | 5.4CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-12111 | Potential LDAP injection vulnerability in OpenText Privileged Access Manager | 8.0CNA v3.1 | 0.4% | 2024-12-19 | |
| CVE-2024-11984 | Sunnet Corporate Training Management System unrestricted upload of file with dangerous type | 8.8CISA ADP v3.1 | 0.8% | 2024-12-19 | Fix |
| CVE-2024-11768 | W3Eden Download Manager checkFilePassword function improper authorization | 5.3CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-11740 | Download Manager WordPress plugin unauthenticated arbitrary shortcode execution | 7.3v3.1 | 1.9% | 2024-12-19 | NucleiFix |
| CVE-2024-11616 | Netskope Endpoint DLP double-fetch heap overflow | 5.6CNA v4.0 | 0.3% | 2024-12-19 | Exploit codeFix |
| CVE-2024-11364 | Rockwell Automation Arena DOE file import vulnerability | 8.5CNA v4.0 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-11157 | Rockwell Automation Arena DOE file parsing out-of-bounds write | 8.5CNA v4.0 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-10548 | WP Project Manager WordPress plugin sensitive information exposure | 6.5CNA v3.1 | 0.4% | 2024-12-19 | Fix |
| CVE-2024-10244 | SQLi in ISDO Software's Web Software | 9.8CNA v3.1 | 0.5% | 2024-12-19 | Fix |
| CVE-2024-9154 | HMS Networks Ewon Flexy 205 authenticated remote code execution | 8.6CNA v4.0 | 0.6% | 2024-12-19 | |
| CVE-2024-9102 | phpLDAPadmin: Improper neutralization of Formula Elements | 5.0CNA v4.0 | 0.4% | 2024-12-19 | |
| CVE-2024-9101 | phpLDAPadmin: Reflected cross-site scripting in entry_chooser.php | 2.1CNA v4.0 | 0.5% | 2024-12-19 | Fix |
| CVE-2024-7139 | Denial of service in Silicon Labs RS9116 Bluetooth SDK | 6.5CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-7138 | Denial of service in Silicon Labs RS9116 Bluetooth SDK | 6.5CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-7137 | Denial of service in Silicon Labs RS9116 Bluetooth SDK | 6.5CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2024-4230 | Edgecross Consortium Edgecross Basic Software external control of a file path | 7.8CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-4229 | Edgecross Consortium Edgecross Basic Software incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2024-2201 | A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems. | 4.7CISA ADP v3.1 | 8.8% | 2024-12-19 | Fix |
| CVE-2024-56319 | Matter resource exhaustion | 7.5CISA ADP v3.1 | 0.5% | 2024-12-18 | Fix |
| CVE-2024-56318 | Matter null pointer dereference | 7.5CISA ADP v3.1 | 0.6% | 2024-12-18 | Fix |
| CVE-2024-56317 | Matter improper preservation of permissions | 7.5CISA ADP v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-56175 | Optimizely Configured Commerce cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-56174 | Optimizely Configured Commerce cross-site scripting | 8.1CISA ADP v3.1 | 0.4% | 2024-12-18 | Fix |
| CVE-2024-56173 | Optimizely Configured Commerce cross-site scripting | 4.7CISA ADP v3.1 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-56170 | NICMx FORT-validator origin validation error | 5.3CISA ADP v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-56169 | NICMx FORT-validator improper integrity check validation | 5.3CISA ADP v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-56145 | Craft CMS code injection | 9.3CNA v4.0 | 97.4% | 2024-12-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-56140 | Bypass of CSRF Middleware in Astro | 5.9CNA v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-56128 | Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption | 5.3CISA ADP v3.1 | 0.8% | 2024-12-18 | Fix |
| CVE-2024-56116 | Amiro.cms cross-site request forgery | 8.8CISA ADP v3.1 | 0.4% | 2024-12-18 | Exploit code |
| CVE-2024-56115 | Amiro.cms cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-12-18 | |
| CVE-2024-56059 | Partners WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.7% | 2024-12-18 | Exploit code |
| CVE-2024-56058 | VRPConnector WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.7% | 2024-12-18 | |
| CVE-2024-56057 | WPLMS WordPress theme arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2024-12-18 | Fix |
| CVE-2024-56055 | WPLMS WordPress theme arbitrary directory deletion vulnerability | 8.8v3.1 | 0.5% | 2024-12-18 | Fix |
| CVE-2024-56054 | WPLMS WordPress theme Instructor+ arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2024-12-18 | Fix |
| CVE-2024-56053 | WPLMS WordPress theme Instructor+ SQL injection | 8.8v3.1 | 0.4% | 2024-12-18 | Fix |
| CVE-2024-56052 | WPLMS WordPress theme Student+ arbitrary file upload | 8.8NVD v3.1 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-56051 | WPLMS WordPress theme Student+ remote code execution (RCE) | 8.8v3.1 | 0.5% | 2024-12-18 | Fix |
| CVE-2024-56050 | WPLMS WordPress theme Subscriber+ arbitrary file upload | 8.8NVD v3.1 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-56049 | WPLMS WordPress theme Subscriber+ arbitrary file deletion | 8.5CNA v3.1 | 0.5% | 2024-12-18 | Fix |
| CVE-2024-56048 | WPLMS WordPress theme arbitrary option update to privilege escalation | 8.8CNA v3.1 | 0.6% | 2024-12-18 | Fix |
| CVE-2024-56047 | WPLMS WordPress theme Subscriber+ SQL injection | 8.8v3.1 | 0.6% | 2024-12-18 | Fix |
| CVE-2024-56016 | Image Mapper WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-56010 | Device Detector WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-56008 | Spreadr Woocommerce WordPress plugin arbitrary content deletion vulnerability | 7.5CNA v3.1 | 0.4% | 2024-12-18 | Fix |
| CVE-2024-55997 | Order Delivery and Pickup Location Date Time WordPress plugin settings Change vulnerability | 6.5CNA v3.1 | 0.5% | 2024-12-18 | |
| CVE-2024-55985 | YDS Support Ticket System WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-12-18 | |
| CVE-2024-55984 | Saksh Escrow System WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-12-18 | |
| CVE-2024-55983 | PowerFormBuilder WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-55975 | Dr Affiliate WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-55953 | DataEase JDBC connection configuration SQL injection | 8.6CNA v4.0 | 1.0% | 2024-12-18 | Fix |
| CVE-2024-55952 | Dataease Redshift Data Source JDBC Connection parameters not Verified leads to RCE | 8.6CNA v4.0 | 0.9% | 2024-12-18 | Fix |
| CVE-2024-55506 | CodeAstro Complaint Management System CodeAstro's insecure direct object reference | 8.8CISA ADP v3.1 | 0.7% | 2024-12-18 | |
| CVE-2024-55505 | CodeAstro Complaint Management System code injection | 8.8CISA ADP v3.1 | 0.7% | 2024-12-18 | |
| CVE-2024-55492 | Magicwinmail Winmail Server cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-55461 | Seacms command injection | 9.8CISA ADP v3.1 | 1.1% | 2024-12-18 | |
| CVE-2024-55239 | Portabilis i-Educar standard documentation upload functionality reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-55232 | PHPGurukul Online Notes Sharing Management System insecure direct object reference | 5.4CISA ADP v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-55231 | PHPGurukul Online Notes Sharing Management System insecure direct object reference | 4.3CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-55089 | Rhymix server-side request forgery | 9.1CISA ADP v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-55088 | Getsimple-ce GetSimpleCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-55086 | Getsimple-ce GetSimpleCMS server-side request forgery | 7.2CISA ADP v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-54457 | FXC AE1021 and AE1021PE firmware telnet service vulnerability | 7.2CNA v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-54383 | WooCommerce - PDF Vouchers WordPress plugin broken authentication | 9.8CNA v3.1 | 1.2% | 2024-12-18 | Exploit codeFix |
| CVE-2024-54381 | Advance Menu Manager WordPress plugin settings Change vulnerability | 7.1CNA v3.1 | 0.5% | 2024-12-18 | Fix |
| CVE-2024-54350 | hmd WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-54270 | Axeptio WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-53688 | FXC AE1021 OS command improper neutralization | 7.2CNA v3.1 | 1.6% | 2024-12-18 | |
| CVE-2024-53580 | ES iperf3 null pointer dereference | 7.5CISA ADP v3.1 | 0.9% | 2024-12-18 | Fix |
| CVE-2024-53271 | HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy | 7.1CNA v3.1 | 0.6% | 2024-12-18 | Fix |
| CVE-2024-53270 | HTTP/1: Sending overload crashes when the request is reset beforehand in envoy | 7.5CNA v3.1 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-53269 | Envoy Happy Eyeballs sorting algorithm denial of service | 4.5CNA v3.1 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-52593 | Missing validation allows spoofed origin links in Misskey | 5.1CNA v4.0 | 0.4% | 2024-12-18 | Fix |
| CVE-2024-52592 | Missing validation allows spoofed poll updates in Misskey | 6.9CNA v4.0 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-52591 | Missing validation allows spoofed profiles and notes in Misskey | 8.8CNA v4.0 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-52590 | Missing validation allows spoofed profiles in Misskey | 8.8CNA v4.0 | 0.4% | 2024-12-18 | Fix |
| CVE-2024-52579 | Server-side request forgery vulnerability in various APIs in Misskey | 6.4CNA v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-52485 | WP Menu Image WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2024-12-18 | Fix |
| CVE-2024-52361 | IBM Storage Defender Resiliency service information disclosure | 5.7CNA v3.1 | 0.5% | 2024-12-18 | Fix |
| CVE-2024-51646 | Saoshyant Element WordPress plugin reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-51470 | IBM MQ denial of service | 6.5CNA v3.1 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-50570 | Fortinet FortiClientLinux cleartext storage of sensitive information | 4.9CNA v3.1 | 0.1% | 2024-12-18 | Fix |
| CVE-2024-49677 | Bootstrap Buttons WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-49576 | Foxit Reader way use-after-free | 8.8CNA v3.1 | 1.1% | 2024-12-18 | Fix |
| CVE-2024-49363 | Uncontrolled recursion and asymmetric resource consumption in media/file proxy in Misskey | 7.4CNA v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-49202 | Keyfactor Command access tokens vulnerability | 7.6CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-49201 | Keyfactor Remote File Orchestrator debug logging information disclosure | 4.3CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-48889 | Fortinet FortiManager OS command injection | 7.2CNA v3.1 | 1.7% | 2024-12-18 | Fix |
| CVE-2024-47810 | Foxit Reader way use-after-free | 8.8CNA v3.1 | 1.3% | 2024-12-18 | Fix |
| CVE-2024-47480 | Dell Inventory Collector Client symlink following | 7.8CNA v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-47397 | FXC AE1021 improper authentication | 7.5CNA v3.1 | 0.4% | 2024-12-18 | |
| CVE-2024-47119 | IBM Storage Defender Resiliency service improper certificate validation | 5.9CNA v3.1 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-47104 | IBM i incorrect privilege assignment | 6.8CNA v3.1 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-47040 | Google Android use-after-free in the Android.hardware.radio.sap.ISap/slot2 service | 10.0CNA v4.0 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-47039 | Google Android OOB read in the Android.hardware.boot.IBootControl/default service | 10.0CNA v4.0 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-47038 | Google Android dhd_msgbuf.c privilege escalation | 10.0CNA v4.0 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-45338 | Non-linear parsing of case-insensitive content in golang.org/x/net/html | 5.3CISA ADP v3.1 | 0.9% | 2024-12-18 | Fix |
| CVE-2024-45082 | IBM Cognos Analytics HTTP open redirection | 6.8CNA v3.1 | 0.2% | 2024-12-18 | Fix |
| CVE-2024-43106 | Microsoft Excel library injection | 9.1v3.1 | 0.7% | 2024-12-18 | |
| CVE-2024-42220 | Microsoft Outlook library injection | 9.1v3.1 | 0.7% | 2024-12-18 | |
| CVE-2024-42004 | Microsoft Teams (work or school) library injection | 9.8v3.1 | 0.8% | 2024-12-18 | |
| CVE-2024-41752 | IBM Cognos Analytics HTML injection | 5.4CNA v3.1 | 0.3% | 2024-12-18 | Fix |
| CVE-2024-41165 | Microsoft Word library injection | 9.1v3.1 | 0.7% | 2024-12-18 | |
| CVE-2024-41159 | Microsoft OneNote library injection | 7.1v3.1 | 0.8% | 2024-12-18 | |
| CVE-2024-41145 | Microsoft Teams (work or school) WebView.app helper app injection | 9.8v3.1 | 0.8% | 2024-12-18 | |
| CVE-2024-41138 | Microsoft Teams (work or school) com. injection | 9.8v3.1 | 0.9% | 2024-12-18 | |
| CVE-2024-39804 | Microsoft PowerPoint injection | 9.1v3.1 | 0.9% | 2024-12-18 | |
| CVE-2024-39703 | ThreatQuotient ThreatQ command injection | 8.7CNA v4.0 | 0.7% | 2024-12-18 | Fix |
| CVE-2024-37649 | SecureSTATION v.2.5.5.3116-S50-SMA-B20160811A and insecure permissions | 4.6CISA ADP v3.1 | 0.3% | 2024-12-18 | |
| CVE-2024-36694 | OpenCart server-side template injection (SSTI) | 7.2CISA ADP v3.1 | 0.9% | 2024-12-18 | Fix |