CVE-2024 list

CVE-2024 records published in December 2024

Page two of four: records 1,001 to 2,000 of the 3,010 published in December 2024, newest first. The first page carries the figures for December 2024.

CVE-2024 records published in December 2024, newest first: records 1,001 to 2,000 of 3,010
CVE Summary CVSS EPSS Published Signals
CVE-2024-25042IBM Cognos Analytics cross-site scripting5.4CNA v3.10.3%2024-12-18Fix
CVE-2024-21548Bun has an Application-level prototype pollution vulnerability in the runtime native API for Glo7.7CNA v4.00.7%2024-12-18Fix
CVE-2024-21547Spatie Browsershot directory traversal8.7CNA v4.00.9%2024-12-18Fix
CVE-2024-21546UniSharp Laravel Filemanager code injection9.3CNA v4.01.3%2024-12-18Exploit codeFix
CVE-2024-12741Deserialization of untrusted data vulnerability in NI DAQExpress Project file8.4CNA v4.04.2%2024-12-18
CVE-2024-12698Red Hat OpenShift Container Platform ose-olm-catalogd-container: Incomplete fix for rapid reset6.5CNA v3.10.5%2024-12-18Fix
CVE-2024-12695Google Chrome V8 out-of-bounds write8.8v3.10.4%2024-12-18Fix
CVE-2024-12694Google Chrome Compositing use-after-free8.8v3.10.4%2024-12-18Fix
CVE-2024-12693Google Chrome V8 out-of-bounds access8.8v3.10.4%2024-12-18Fix
CVE-2024-12692Google Chrome V8 type confusion8.8v3.17.2%2024-12-18Fix
CVE-2024-12686BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS command injection6.6CNA v3.113.7%2024-12-18KEVFix
CVE-2024-12596chrisbadgett LifterLMS llms_delete_cert action missing authorization4.3CNA v3.10.3%2024-12-18Fix
CVE-2024-12554Peter’s Custom Anti-Spam WordPress plugin cross-site request forgery via cas_register_post function5.4CNA v3.10.2%2024-12-18Fix
CVE-2024-12513Contests by Rewards Fuel WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-18Fix
CVE-2024-12500Philantro Donations and Donor Management WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-18Fix
CVE-2024-12454Affiliate Program Suite WordPress plugin cross-site request forgery6.1CNA v3.10.2%2024-12-18Fix
CVE-2024-12449Video Share VOD Turnkey Video Site Builder Script WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-18Fix
CVE-2024-12432WPC Shop as a Customer for WooCommerce WordPress plugin account takeover8.1CNA v3.10.6%2024-12-18Fix
CVE-2024-12373Rockwell Automation PowerMonitor™ 1000 denial of service9.3CNA v4.00.5%2024-12-18Fix
CVE-2024-12372Rockwell Automation PowerMonitor™ 1000 denial of service9.3CNA v4.00.9%2024-12-18Fix
CVE-2024-12371Rockwell Automation PowerMonitor™ 1000 remote code execution9.3CNA v4.00.5%2024-12-18Fix
CVE-2024-12340Animation Addons for Elementor WordPress plugin sensitive information exposure4.3CNA v3.10.3%2024-12-18Fix
CVE-2024-12287Biagiotti Membership WordPress plugin authentication bypass9.8CNA v3.10.6%2024-12-18Fix
CVE-2024-12259CRM WordPress Plugin RepairBuddy missing authorization to account takeover/privilege escalation8.8CNA v3.10.5%2024-12-18Fix
CVE-2024-12250Accept Authorize.NET Payments Using Contact Form 7 WordPress plugin information disclosure5.3CNA v3.10.4%2024-12-18Fix
CVE-2024-12061Events Addon for Elementor WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.4%2024-12-18Fix
CVE-2024-12025Collapsing Categories WordPress plugin unauthenticated SQL injection7.5CNA v3.12.7%2024-12-18NucleiExploit codeFix
CVE-2024-11926Travel Booking WordPress Theme WordPress theme unauthorized access6.5CNA v3.10.3%2024-12-18Fix
CVE-2024-11912Travel Booking WordPress Theme WordPress theme SQL injection7.5CNA v3.10.5%2024-12-18Fix
CVE-2024-11881Easy Waveform Player WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-18Fix
CVE-2024-11748Taeggie Feed WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-18Fix
CVE-2024-11614DPDK Vhost library checksum offload out-of-bounds read7.4CNA v3.00.6%2024-12-18Fix
CVE-2024-11439ScanCircle WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-18Fix
CVE-2024-11295Simple Page Access Restriction WordPress plugin information disclosure5.3CNA v3.10.5%2024-12-18Fix
CVE-2024-11291Paid Membership Subscriptions WordPress plugin information disclosure5.3CNA v3.10.5%2024-12-18Fix
CVE-2024-11254AMP for WP Accelerated Mobile Pages WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-18Fix
CVE-2024-10892Cost Calculator Builder WordPress plugin settings update via CSRF5.4CISA ADP v3.10.2%2024-12-18Fix
CVE-2024-4996Hard-coded password in Wapro ERP Desktop9.8CISA ADP v3.10.6%2024-12-18Fix
CVE-2024-4995Asseco Business Solutions Wapro ERP Desktop MS SQL protocol negotiation vulnerability9.8CISA ADP v3.10.9%2024-12-18Fix
CVE-2024-4464Synology Media Server streaming service insecure direct object reference7.5CNA v3.10.6%2024-12-18Fix
CVE-2024-1610OPPO Store app include remote account token hijacking and sensitive information leakage8.7CNA v4.00.7%2024-12-18
CVE-2024-56142Path traversal in pghoard4.8CNA v4.00.4%2024-12-17Fix
CVE-2024-56139A stack overflow Segmentation Fault (SEGV) and memory leak in pdftools6.9CNA v4.00.4%2024-12-17
CVE-2024-55864gqevu6bsiz My WP Customize Admin/Frontend cross-site scripting4.8CNA v3.00.3%2024-12-17Fix
CVE-2024-55516Raisecom MSG2100E path traversal9.1CISA ADP v3.10.5%2024-12-17
CVE-2024-55515Raisecom MSG2100E path traversal9.8CISA ADP v3.10.6%2024-12-17
CVE-2024-55514Raisecom MSG2100E unrestricted file upload6.3CISA ADP v3.10.2%2024-12-17
CVE-2024-55513Raisecom MSG2100E path traversal9.1CISA ADP v3.10.5%2024-12-17
CVE-2024-554961000 Projects Bookstore Management System SQL injection9.1CISA ADP v3.10.6%2024-12-17
CVE-2024-55059PHPGurukul Online Birth Certificate System cross-site scripting6.1CISA ADP v3.10.2%2024-12-17
CVE-2024-55058PHPGurukul Online Birth Certificate System incorrectly resolved name or reference4.3CISA ADP v3.10.2%2024-12-17
CVE-2024-55057PHPGurukul Online Birth Certificate System weak password hash5.4CISA ADP v3.10.1%2024-12-17
CVE-2024-55056PHPGurukul Online Birth Certificate System cross-site scripting5.4CISA ADP v3.10.2%2024-12-17
CVE-2024-54677Apache Tomcat: DoS in examples web application5.3CISA ADP v3.11.9%2024-12-17Fix
CVE-2024-54662Dante sockd.conf socksmethod setting incorrect authorization9.1CISA ADP v3.10.5%2024-12-17Fix
CVE-2024-54125SHUEISHA "Shonen Jump+" App handler for custom URL scheme issue improper authorization3.3CNA v3.00.2%2024-12-17
CVE-2024-53144Linux kernel Bluetooth BR/EDR pairing vulnerability8.8CNA v3.10.4%2024-12-17Fix
CVE-2024-52792Arbitrary config values override in lam6.5CNA v3.10.7%2024-12-17Fix
CVE-2024-52542Dell AppSync symlink following4.4CNA v3.10.2%2024-12-17Fix
CVE-2024-51479Authorization bypass in Next.js7.5CNA v3.14.0%2024-12-17Fix
CVE-2024-51175H3C S1526 switch S1526.cfg information disclosure7.5CISA ADP v3.10.3%2024-12-17
CVE-2024-50379Apache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8CISA ADP v3.131.8%2024-12-17Emerging ThreatsExploit codeFix
CVE-2024-49820IBM Security Guardium Key Lifecycle Manager information disclosure3.7CNA v3.10.3%2024-12-17Fix
CVE-2024-49819IBM Security Guardium Key Lifecycle Manager information disclosure4.1CNA v3.10.3%2024-12-17Fix
CVE-2024-49818IBM Security Guardium Key Lifecycle Manager information disclosure4.3CNA v3.10.5%2024-12-17Fix
CVE-2024-49817IBM Security Guardium Key Lifecycle Manager information disclosure4.4CNA v3.10.2%2024-12-17Fix
CVE-2024-49816IBM Security Guardium Key Lifecycle Manager information disclosure4.9CNA v3.10.4%2024-12-17Fix
CVE-2024-49194Databricks JDBC driver command injection7.3CISA ADP v3.10.7%2024-12-17Fix
CVE-2024-42194HCL BigFix Inventory is affected by an access control vulnerability3.1CNA v3.10.3%2024-12-17
CVE-2024-38499Improper privilege management vulnerability in CA Client Automation7.3CNA v4.00.2%2024-12-17Fix
CVE-2024-37607D-Link Dap-2555 buffer overflow6.5CISA ADP v3.10.6%2024-12-17Fix
CVE-2024-37606D-Link DCS-932L stack-based buffer overflow6.5CISA ADP v3.10.5%2024-12-17
CVE-2024-37605D-Link DIR-860L null pointer dereference6.5CISA ADP v3.10.7%2024-12-17
CVE-2024-36832D-Link Dap-1513 null pointer dereference7.5CISA ADP v3.10.4%2024-12-17Fix
CVE-2024-36831D-Link DAP-1520 plugins_call_handle_uri_clean function null pointer dereference5.3CISA ADP v3.10.7%2024-12-17Fix
CVE-2024-31668rizin OS command injection9.1CISA ADP v3.10.5%2024-12-17
CVE-2024-29646radare2 radarorg buffer overflow9.8CISA ADP v3.10.9%2024-12-17Fix
CVE-2024-12671DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12670DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12669DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12601Calculated Fields Form WordPress plugin denial of service5.3CNA v3.10.6%2024-12-17Fix
CVE-2024-12539Elasticsearch incorrect authorization6.0CNA v4.00.5%2024-12-17Fix
CVE-2024-12469WP BASE Booking of Appointments, Services and Events WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-12-17Fix
CVE-2024-12395WooCommerce Additional Fees On Checkout (Free) WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-12-17Fix
CVE-2024-12356BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) command injection9.8CNA v3.187.3%2024-12-17KEVNucleiMetasploitExploit codeKCVFix
CVE-2024-12293User Role Editor WordPress plugin cross-site request forgery to privilege escalation8.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12239PowerPack Lite for Beaver Builder WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-17Fix
CVE-2024-12220SMS for WooCommerce WordPress plugin cross-site request forgery to reflected cross-site scripting6.1CNA v3.10.2%2024-12-17Fix
CVE-2024-12219Stop Registration Spam WordPress plugin cross-site request forgery to cross-site scripting6.1CNA v3.10.2%2024-12-17Fix
CVE-2024-12200DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12199DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12198DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12197DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12194DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12193DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12192DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12191DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12179DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12178DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.3%2024-12-17Fix
CVE-2024-12127Learning Management System WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-17Fix
CVE-2024-12024EventPrime WordPress plugin stored cross-site scripting6.1NVD v3.10.4%2024-12-17Fix
CVE-2024-11999CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product.8.7CNA v4.00.6%2024-12-17
CVE-2024-11993Liferay Portal and Liferay DXP vulnerable to cross-site scripting4.6CNA v4.00.3%2024-12-17Fix
CVE-2024-11906TPG Get Posts WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-17
CVE-2024-11905Animated Counters WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-17
CVE-2024-11902Slope Widgets WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-17Fix
CVE-2024-11900Portfolio WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-17
CVE-2024-11422DWFX File Parsing vulnerabilities in Autodesk Navisworks Desktop software7.8CNA v3.10.4%2024-12-17Fix
CVE-2024-11294Memberful WordPress plugin information disclosure5.3CNA v3.10.5%2024-12-17Fix
CVE-2024-11280PPWP WordPress plugin information disclosure5.3CNA v3.10.4%2024-12-17Fix
CVE-2024-10973Keycloak: Cli option for encrypted jgroups ignored5.7CNA v3.10.3%2024-12-17Fix
CVE-2024-10476Becton Dickinson & BD Synapsys™ Informatics Solution default credentials8.0CNA v3.10.2%2024-12-17Fix
CVE-2024-10356ElementsReady Addons for Elementor WordPress plugin sensitive information exposure4.3CNA v3.10.4%2024-12-17Fix
CVE-2024-10205Hitachi Ops Center Analyzer authentication bypass9.4CNA v3.10.8%2024-12-17Fix
CVE-2024-9819IDOR in NextGEO's NG Analyser6.5CNA v3.10.5%2024-12-17Fix
CVE-2024-9779Open Cluster Management vulnerable to trust boundary violation7.5CNA v3.10.4%2024-12-17Fix
CVE-2024-9654Easy Digital Downloads - improper authorization to Paywall Bypass3.7CNA v3.10.4%2024-12-17Fix
CVE-2024-9624WP All Import Pro WordPress plugin server-side request forgery7.6CNA v3.10.4%2024-12-17Fix
CVE-2024-8972SQLi in Mobil365 Informatics' Saha365 App9.8CNA v3.10.4%2024-12-17Fix
CVE-2024-8475Protection mechanism failure in Digital Operation Services' WiFiBurada6.5CNA v3.10.4%2024-12-17Fix
CVE-2024-8429Improper authentication in Digital Operation Services' WiFiBurada4.3CNA v3.10.4%2024-12-17Fix
CVE-2024-8326s2Member WordPress plugin information disclosure8.8CNA v3.10.6%2024-12-17Fix
CVE-2024-56112CyberPanel cross-site scripting6.1CISA ADP v3.10.3%2024-12-16
CVE-2024-56087Logpoint SIEM command injection5.9CISA ADP v3.10.3%2024-12-16Fix
CVE-2024-56086Logpoint SIEM command injection7.1CISA ADP v3.10.4%2024-12-16Fix
CVE-2024-56085Logpoint SIEM command injection5.9CISA ADP v3.10.3%2024-12-16Fix
CVE-2024-56084Logpoint Universal Normalizer command injection7.1CISA ADP v3.10.3%2024-12-16Fix
CVE-2024-56083Cognition Devin VSCode live share session vulnerability8.1CISA ADP v3.10.5%2024-12-16
CVE-2024-56017Stop Registration Spam WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2024-12-16Fix
CVE-2024-56015Tidy Up WordPress plugin CSRF to reflected cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-56013Wovax IDX WordPress plugin account takeover8.8CNA v3.10.7%2024-12-16
CVE-2024-56012Flash News / Post (Responsive) WordPress plugin CSRF to privilege escalation9.8CNA v3.10.4%2024-12-16
CVE-2024-56011Responsive Google Maps by imbaa WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2024-12-16Fix
CVE-2024-56009Spreadr Woocommerce WordPress plugin broken access control5.3CNA v3.10.4%2024-12-16Fix
CVE-2024-56007Leader WordPress plugin broken access control4.3CNA v3.10.3%2024-12-16
CVE-2024-56005Posti Shipping WordPress plugin CSRF to settings Change6.5CNA v3.10.3%2024-12-16Fix
CVE-2024-56004Easy Site Importer WordPress plugin settings Change vulnerability5.4CNA v3.10.4%2024-12-16
CVE-2024-56003Caldera SMTP Mailer WordPress plugin broken access control4.3CNA v3.10.4%2024-12-16
CVE-2024-56001Ksher WordPress plugin broken access control6.5CNA v3.10.5%2024-12-16Fix
CVE-2024-55999XML Multilanguage Sitemap Generator WordPress plugin broken access control5.3CNA v3.10.4%2024-12-16
CVE-2024-55998Popup Surveys and Polls for WordPress (Mare.io) plugin settings Change vulnerability5.4CNA v3.10.4%2024-12-16
CVE-2024-55996Payment gateway per Product for WooCommerce WordPress plugin broken access control6.1CNA v3.10.4%2024-12-16Fix
CVE-2024-55994畅言评论系统 WordPress plugin broken access control4.3CNA v3.10.5%2024-12-16
CVE-2024-55993Job Board Manager WordPress plugin broken access control5.3CNA v3.10.6%2024-12-16
CVE-2024-55992WooCommerce Basic Ordernumbers WordPress plugin broken access control5.4CNA v3.10.4%2024-12-16
CVE-2024-55990Mollie for Contact Form 7 WordPress plugin SQL injection7.6CNA v3.10.5%2024-12-16
CVE-2024-55989WP Simple Pay Lite Manager WordPress plugin SQL injection7.6CNA v3.10.5%2024-12-16
CVE-2024-55988Navayan CSV Export WordPress plugin SQL injection9.3CNA v3.11.2%2024-12-16Exploit code
CVE-2024-55987Advanced What should we write next about WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-16
CVE-2024-55986Service WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-16
CVE-2024-55982Share Buttons Social Media WordPress plugin SQL injection9.3CNA v3.11.8%2024-12-16Exploit code
CVE-2024-55981Nabz Image Gallery WordPress plugin SQL injection9.3CNA v3.11.0%2024-12-16Exploit code
CVE-2024-55980Wr Age Verification WordPress plugin SQL injection9.3CNA v3.10.8%2024-12-16Exploit code
CVE-2024-55979Wr Age Verification WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-16
CVE-2024-55978Code Generator Pro WordPress plugin SQL injection9.3CNA v3.10.8%2024-12-16Exploit code
CVE-2024-55977LaunchPage.app Importer WordPress plugin SQL injection9.3CNA v3.10.5%2024-12-16
CVE-2024-55976Critical Site Intel WordPress plugin SQL injection9.3CNA v3.11.2%2024-12-16Exploit code
CVE-2024-55974Mimoos WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-16
CVE-2024-55973TSB Occasion Editor WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-16
CVE-2024-55972eTemplates WordPress plugin SQL injection9.3CNA v3.11.2%2024-12-16Exploit code
CVE-2024-55951Metabase sandboxed users could see filter values from other sandboxed users4.8CNA v4.00.4%2024-12-16Fix
CVE-2024-55949Privilege escalation in IAM import API in MinIO9.3CNA v4.00.7%2024-12-16Fix
CVE-2024-55557Weasis proxy credential encryption hard-coded credentials9.8CISA ADP v3.11.4%2024-12-16Exploit code
CVE-2024-55554Intrexx Portal Server user-defined portlets cross-site scripting5.4CISA ADP v3.10.2%2024-12-16
CVE-2024-55452UJCMS A open redirect5.4CISA ADP v3.10.3%2024-12-16
CVE-2024-55451UJCMS stored cross-site scripting4.8CISA ADP v3.10.3%2024-12-16
CVE-2024-55104PHPGurukul Online Nurse Hiring System SQL injection7.2CISA ADP v3.10.6%2024-12-16
CVE-2024-55103PHPGurukul Online Nurse Hiring System SQL injection7.2CISA ADP v3.10.6%2024-12-16
CVE-2024-55100PHPGurukul Online Nurse Hiring System component /admin/profile.php stored cross-site scripting4.8CISA ADP v3.10.3%2024-12-16
CVE-2024-55085Getsimple-ce GetSimpleCMS code injection9.8CISA ADP v3.10.9%2024-12-16
CVE-2024-54682Mattermost Zipbomb DoS via Missing Slack Import Validation6.5CNA v3.10.4%2024-12-16Fix
CVE-2024-54443Advanced Data Table For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-16Fix
CVE-2024-54442Better WP Login Page WordPress plugin stored cross-site scripting (XSS)5.9CNA v3.10.4%2024-12-16
CVE-2024-54441Utech World Time WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-16
CVE-2024-54440WP-Ban-User WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54439Amazon Product Price WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54438Gaxx Keywords WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54437jCarousel for WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2024-12-16
CVE-2024-54436Jet Footer Code WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54435Onlywire Multi Autosubmitter WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54434phZoom WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54433Simple Booking Widget WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54432WP Flipkart Importer WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54431Admin Customization WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54430EELV Newsletter WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-12-16
CVE-2024-54429Aphorismus WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54428onigetoc Add image to Post cross-site request forgery7.1CNA v3.10.2%2024-12-16
CVE-2024-54427Category of Posts WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54426LeaderBoard WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54425LionScripts: Site Maintenance WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54424Like in Vk.com WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.4%2024-12-16
CVE-2024-54423Social Media Sharing WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54422Evernote Sync WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-16
CVE-2024-54421Floating Video Player WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54420Metrika WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54419Ui Slider Filter By Price WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-12-16
CVE-2024-54418DTC Documents WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-12-16
CVE-2024-54417PixProof WordPress plugin broken access control5.3CNA v3.10.5%2024-12-16
CVE-2024-54416Wp Login with Ajax WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54415WP-HideThat WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54414Geoportail Shortcode WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54413Display Future Posts WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54412ECT Product Carousel WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54411WP Controller WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16
CVE-2024-54410SOPA Blackout WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54409XPD Reduce Image Filesize WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54408Youtube Video Grid WordPress plugin CSRF to settings Change6.5CNA v3.10.4%2024-12-16
CVE-2024-54407CK and SyntaxHighlighter WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54406Comments On Feed WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-16
CVE-2024-54405ECT Social Share WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54404MDC Comment Toolbar WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54403Visual Recent Posts WordPress plugin reflected cross-site request forgery (CSRF)7.1CNA v3.10.4%2024-12-16
CVE-2024-54402Arabic Webfonts WordPress plugin broken access control4.3CNA v3.10.6%2024-12-16
CVE-2024-54401Advanced Fancybox WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54400AppMaps WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54399CRUDLab Google Plus Button WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54398Flaming Forms WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54397Go Animate WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54396Bet sport Free WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.3%2024-12-16
CVE-2024-54395preblogging Increase Sociability reflected cross-site scripting7.1CNA v3.10.4%2024-12-16
CVE-2024-54394Mandrill WP WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54393WP Fiddle WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54392WP微信机器人 WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54391WordPress Filter plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54390TagGator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-16
CVE-2024-54389addWeather WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54388Multiple Admin Emails WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54387Posts Date Ranges WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-16
CVE-2024-54386Push Monkey Pro WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16
CVE-2024-54385Radio Player WordPress plugin server side request forgery (SSRF)7.2CNA v3.15.5%2024-12-16NucleiExploit codeFix
CVE-2024-54384Falcon WordPress Optimizations and Tweaks plugin broken access control4.3CNA v3.10.4%2024-12-16Fix
CVE-2024-54382Bold Page Builder WordPress plugin path traversal4.9v3.12.2%2024-12-16Fix
CVE-2024-54380WP Cookies Enabler WordPress plugin local file inclusion7.5CNA v3.10.7%2024-12-16
CVE-2024-54379Minterpress WordPress plugin arbitrary option update to privilege escalation8.8CNA v3.10.8%2024-12-16Exploit code
CVE-2024-54378Quietly Insights WordPress plugin arbitrary option update to privilege escalation8.8CNA v3.10.8%2024-12-16Exploit code
CVE-2024-54376EazyDocs WordPress plugin local file inclusion7.5CNA v3.10.6%2024-12-16Fix
CVE-2024-54375Woolook WordPress plugin local file inclusion7.5CNA v3.10.7%2024-12-16
CVE-2024-54374Sogrid WordPress plugin local file inclusion7.5CNA v3.11.3%2024-12-16Exploit codeFix
CVE-2024-54373EduAdmin Booking WordPress plugin local file inclusion7.5CNA v3.10.8%2024-12-16Fix
CVE-2024-54372Insertify WordPress plugin CSRF to remote code execution9.6CNA v3.10.3%2024-12-16
CVE-2024-54370Video and Photo Gallery for Ultimate Member WordPress plugin arbitrary file upload9.9CNA v3.10.7%2024-12-16Fix
CVE-2024-54369Zita Site Builder WordPress plugin arbitrary plugin installation and activation vulnerability9.1CNA v3.11.6%2024-12-16Exploit code
CVE-2024-54368GitSync WordPress plugin CSRF to remote code execution9.6CNA v3.10.3%2024-12-16
CVE-2024-54367ForumWP WordPress plugin PHP object injection9.8v3.10.7%2024-12-16Fix
CVE-2024-54366Vimeography WordPress plugin full path disclosure (FPD)5.3CNA v3.10.6%2024-12-16Fix
CVE-2024-54365KH Easy User Settings WordPress plugin privilege escalation8.8CNA v3.10.6%2024-12-16
CVE-2024-54364Feedpress Generator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-16
CVE-2024-54363Wp NssUser Register WordPress plugin privilege escalation9.8CNA v3.11.9%2024-12-16Exploit code
CVE-2024-54361Instant Appointment WordPress plugin SQL injection9.3CNA v3.10.5%2024-12-16
CVE-2024-54360Gutensee WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-16Fix
CVE-2024-54359Banner System WordPress plugin broken access control8.2CNA v3.10.7%2024-12-16
CVE-2024-543583D Avatar User Profile WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-16
CVE-2024-54357Avada WordPress theme cross-site request forgery (CSRF)4.3v3.10.2%2024-12-16Fix
CVE-2024-54356Online Booking and Scheduling Calendar for WordPress by vcita plugin cross-site request forgery5.4v3.10.2%2024-12-16Fix
CVE-2024-54355WP Mailster WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2024-12-16Fix
CVE-2024-54354Termin-Kalender WordPress plugin broken access control6.5CNA v3.10.4%2024-12-16Fix
CVE-2024-54353Hack-Info WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2024-12-16Fix
CVE-2024-54352Sogrid WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2024-12-16Fix
CVE-2024-54348YayCommerce Brand stored cross-site scripting6.5CNA v3.10.2%2024-12-16Fix
CVE-2024-54332WP Currency Exchange Rates WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-16Fix
CVE-2024-54331I Plant A Tree WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-16Fix
CVE-2024-54285SeedProd Pro WordPress plugin remote code execution (RCE)9.1CNA v3.10.5%2024-12-16Fix
CVE-2024-54284SeedProd Pro WordPress plugin SQL injection7.6CNA v3.10.5%2024-12-16Fix
CVE-2024-54283SeedProd Pro WordPress plugin SQL injection7.6CNA v3.10.5%2024-12-16Fix
CVE-2024-54280WPBookit WordPress plugin SQL injection9.8v3.10.6%2024-12-16
CVE-2024-54279WP-NERD Toolkit WordPress plugin sensitive data exposure7.5CNA v3.10.5%2024-12-16
CVE-2024-54257tydskrif WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-12-16
CVE-2024-54249Advanced Options Editor WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-12-16
CVE-2024-54229SV100 Companion WordPress plugin privilege escalation9.8CNA v3.10.4%2024-12-16
CVE-2024-54083Mattermost DoS via lack of type validation in Calls6.5CNA v3.10.6%2024-12-16Fix
CVE-2024-53376CyberPanel OS command injection8.8CISA ADP v3.110.9%2024-12-16Exploit code
CVE-2024-52949Iptraf-ng buffer overflow7.5CISA ADP v3.10.7%2024-12-16Fix
CVE-2024-49775Siemens Opcenter Execution Foundation heap-based buffer overflow9.3CNA v4.01.5%2024-12-16Fix
CVE-2024-48872Mattermost bypass of Max failed attempts restriction via race condition4.8CNA v3.10.3%2024-12-16Fix
CVE-2024-43234Woffice WordPress theme unauthenticated account takeover9.8CNA v3.10.7%2024-12-16Fix
CVE-2024-37776Sunbirddcim Dctrack cross-site scripting4.8CISA ADP v3.10.3%2024-12-16Fix
CVE-2024-37775Sunbirddcim Dctrack incorrect authorization7.5CISA ADP v3.10.5%2024-12-16Fix
CVE-2024-37774Sunbirddcim Dctrack cross-site request forgery8.0CISA ADP v3.10.2%2024-12-16Fix
CVE-2024-37773Sunbirddcim Dctrack HTML injection4.8CISA ADP v3.10.2%2024-12-16Fix
CVE-2024-37251Advanced Custom Fields Pro WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-12-16Fix
CVE-2024-35230Welcome and About GeoServer pages communicate version and revision information5.3CNA v3.10.7%2024-12-16Fix
CVE-2024-29671NEXTU FLATA AX1500 Router v.1.0.2 buffer overflow9.8CISA ADP v3.124.5%2024-12-16Exploit code
CVE-2024-12687PlexTrac insecure YAML deserialization8.6CNA v4.00.7%2024-12-16Fix
CVE-2024-12668Velocidex WinPmem out-of-bounds write8.2CNA v3.10.2%2024-12-16
CVE-2024-12667InvoicePlane view session expiration5.9v3.10.5%2024-12-16Fix
CVE-2024-12666ClassCMS User Management page admin insufficient privileges8.8v3.10.5%2024-12-16
CVE-2024-12665ruifang-tech Rebuild Task Comment Attachment upload cross-site scripting5.4v3.10.4%2024-12-16
CVE-2024-12664ruifang-tech Rebuild Project Task Comment cross-site scripting5.4v3.10.5%2024-12-16
CVE-2024-12663funnyzpc Mee-Admin Login login observable response discrepancy6.3CNA v4.00.4%2024-12-16
CVE-2024-12662IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E040 null pointer dereference5.5v3.10.3%2024-12-16
CVE-2024-12661IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E024 null pointer dereference6.8CNA v4.00.4%2024-12-16
CVE-2024-12660IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereference5.5v3.10.5%2024-12-16
CVE-2024-12659IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E004 null pointer dereference5.5v3.10.5%2024-12-16
CVE-2024-12658IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereference5.5v3.10.5%2024-12-16
CVE-2024-12657IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E000 null pointer dereference5.5v3.10.4%2024-12-16
CVE-2024-12656FabulaTech USB over Network IOCT ftusbbus2.sys 0x220448 null pointer dereference5.5v3.10.3%2024-12-16
CVE-2024-12655FabulaTech USB over Network IOCT ftusbbus2.sys 0x220420 null pointer dereference5.5v3.10.5%2024-12-16
CVE-2024-12654FabulaTech USB over Network IOCT ftusbbus2.sys 0x220408 null pointer dereference5.5v3.10.3%2024-12-16
CVE-2024-12653FabulaTech USB over Network IOCT ftusbbus2.sys 0x22040C null pointer dereference5.5v3.10.4%2024-12-16
CVE-2024-12646Chunghwa Telecom topm-client arbitrary file delete8.1CNA v3.10.3%2024-12-16Fix
CVE-2024-12645Chunghwa Telecom topm-client arbitrary file read6.5CNA v3.10.3%2024-12-16Fix
CVE-2024-12644Chunghwa Telecom tbm-client arbitrary File Copy and Paste7.1CNA v3.10.3%2024-12-16Fix
CVE-2024-12643Chunghwa Telecom tbm-client arbitrary file delete8.1CNA v3.10.3%2024-12-16Fix
CVE-2024-12642Chunghwa Telecom TenderDocTransfer arbitrary file write8.1CNA v3.10.4%2024-12-16Fix
CVE-2024-12641Chunghwa Telecom TenderDocTransfer reflected cross-site scripting to RCE9.6CNA v3.11.4%2024-12-16Exploit codeFix
CVE-2024-12478InvoicePlane 1 upload_file unrestricted upload8.8v3.10.6%2024-12-16Fix
CVE-2024-12443CRM Perks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-16Fix
CVE-2024-12362InvoicePlane invoices.php download path traversal5.3CNA v4.00.6%2024-12-16Fix
CVE-2024-12092Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.3%2024-12-16
CVE-2024-12091Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.3%2024-12-16
CVE-2024-12090Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.3%2024-12-16
CVE-2024-12089Dassault Systèmes ENOVIA Collaborative Industry Innovator stored cross-site scripting8.7CNA v3.10.4%2024-12-16
CVE-2024-11841Tithe.ly Giving Button WordPress plugin Contributor+ stored XSS via shortcode5.4CISA ADP v3.10.3%2024-12-16
CVE-2024-11358Insecure Android File Provider Paths5.7CNA v3.10.1%2024-12-16Fix
CVE-2024-11144Race condition with LightFTP9.2CNA v4.00.4%2024-12-16
CVE-2024-10972WinPmem improper input validation7.3CNA v3.10.2%2024-12-16
CVE-2024-10095Progress UI for WPF format provider unsafe deserialization8.4CNA v3.10.7%2024-12-16Fix
CVE-2024-9679Trellix DLP Extension A hard-coded cryptographic key5.3CNA v3.10.4%2024-12-16
CVE-2024-9678Trellix DLP Extension An SQL injection4.9CNA v3.10.8%2024-12-16
CVE-2024-8798zephyrproject-rtos Zephyr bluetooth: Classic: Avdtp: Missing buffer length check7.5CNA v3.10.4%2024-12-16Fix
CVE-2024-8650Incorrect authorization in GitLab5.3CNA v3.10.5%2024-12-16Fix
CVE-2024-8116Incorrect authorization in GitLab5.3CNA v3.10.4%2024-12-16Fix
CVE-2024-8058Lenovo FileZ Client improper type validation7.6CNA v3.10.3%2024-12-16Fix
CVE-2024-6001Lenovo Accessories and Display Manager improper certificate validation8.1CNA v3.10.3%2024-12-16Fix
CVE-2024-5333The Events Calendar WordPress plugin unauthenticated password Protected Event disclosure5.3CISA ADP v3.11.1%2024-12-16NucleiFix
CVE-2024-4762Lenovo Accessories and Display Manager improper certificate validation7.8CNA v3.10.1%2024-12-16Fix
CVE-2024-56082Lumos ChatBar markdown rendering cross-site scripting3.5CISA ADP v3.10.4%2024-12-15
CVE-2024-56074gitingest link following5.5CISA ADP v3.10.4%2024-12-15
CVE-2024-56073Pavel-odintsov Fastnetmon divide by zero7.5CISA ADP v3.10.6%2024-12-15Fix
CVE-2024-56072Pavel-odintsov Fastnetmon code injection7.5CISA ADP v3.10.7%2024-12-15Fix
CVE-2024-55970Syncfusion Essential Studio for ASP.NET MVC File Manager path traversal7.5CISA ADP v3.10.5%2024-12-15
CVE-2024-55969Syncfusion Essential Studio for ASP.NET MVC DocIO vulnerability9.1CISA ADP v3.10.6%2024-12-15
CVE-2024-11858Radare2: Command injection via pebble application files in radare27.8NVD v3.10.8%2024-12-15Fix
CVE-2024-7701percona-toolkit misuse of SHA256 to create an encryption key7.5NVD v3.10.2%2024-12-15Fix
CVE-2024-31892IBM Storage Scale SQL injection7.5CNA v3.10.3%2024-12-14Fix
CVE-2024-31891IBM Storage Scale privilege escalation7.8CNA v3.10.2%2024-12-14Fix
CVE-2024-12628bodi0’s Easy Cache WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.4%2024-12-14Fix
CVE-2024-12578Tickera WordPress plugin information disclosure5.3CNA v3.10.5%2024-12-14Fix
CVE-2024-12555SIP Calculator WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2024-12-14
CVE-2024-12523States Map US WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.5%2024-12-14
CVE-2024-12517WooCommerce Cart Count Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-14
CVE-2024-12502My IDX Home Search WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-12501Simple Locator WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-12474GeoDataSource Country Region DropDown WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-12459Ganohrs Toggle Shortcode WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-12458Smart PopUp Blaster WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14
CVE-2024-12448Posts and Products Views for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-12447Get Post Content Shortcode WordPress plugin insecure direct object reference4.3CNA v3.10.3%2024-12-14
CVE-2024-12446Post to Pdf WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-12422Import Eventbrite Events WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-14Fix
CVE-2024-12411WP Ad Guru WordPress plugin stored cross-site scripting6.1CNA v3.10.3%2024-12-14
CVE-2024-11894The Permalinker WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11889My IDX Home Search WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11888IDer Login for WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14
CVE-2024-11884Wp photo text slider 50 WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14
CVE-2024-11883Connatix Video Embed WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14
CVE-2024-11877Cricket Live Score WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-11876Kredeum NFTs kredeum_opensky shortcode stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-11873glomex oEmbed WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11869Buk for WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-11867Companion Portfolio Responsive Portfolio WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-14
CVE-2024-11865Tabs Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14
CVE-2024-11855Koalendar Events and Appointments Booking Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11770Post Carousel and Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11763Plezi WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11759Bukza WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-11755IMS Countdown WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14Fix
CVE-2024-11752Eveeno WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-14Fix
CVE-2024-11751TCBD Popover WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-14
CVE-2024-11721Frontend Admin by DynamiApps WordPress plugin unauthenticated privilege escalation8.1CNA v3.10.6%2024-12-14Fix
CVE-2024-11720Frontend Admin by DynamiApps WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2024-12-14Fix
CVE-2024-11715WP Job Portal WordPress plugin missing authorization to limited privilege escalation9.8v3.10.5%2024-12-14Fix
CVE-2024-11714WP Job Portal WordPress plugin authenticated (Admin+) SQL injection via getFieldsForVisibleCombobox4.9v3.10.5%2024-12-14Fix
CVE-2024-11713WP Job Portal WordPress plugin authenticated (Admin+) SQL injection via wpjobportal_deactivate4.9v3.10.5%2024-12-14Fix
CVE-2024-11712WP Job Portal WordPress plugin missing authorization to unauthenticated arbitrary Resume download5.3CNA v3.10.5%2024-12-14Fix
CVE-2024-11711WP Job Portal WordPress plugin unauthenticated SQL injection7.5v3.10.5%2024-12-14Fix
CVE-2024-11710WP Job Portal WordPress plugin authenticated (Admin+) SQL injection4.9v3.10.5%2024-12-14Fix
CVE-2024-11462Filestack Official WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-14Fix
CVE-2024-11095Visualmodo Elements WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-14
CVE-2024-10690Shortcodes for Elementor WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2024-12-14Fix
CVE-2024-10646Contact Form Plugin by Fluent Forms for Quiz WordPress plugin stored cross-site scripting6.1NVD v3.10.4%2024-12-14Fix
CVE-2024-9698Crafthemes Demo Import WordPress plugin arbitrary file upload in process_uploaded_files7.2CNA v3.11.8%2024-12-14Exploit code
CVE-2024-55956Cleo Multiple Products Unauthenticated file upload9.8v3.194.0%2024-12-13KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2024-55946Quetrobits Playloom-Engine Playloom Engine Data Storage vulnerability8.7CNA v4.00.4%2024-12-13
CVE-2024-55918An issue was discovered in the Graphics::ColorNames package before 3.2.0 for Perl. There is an ambiguity between modules and filenames that can lead to HTML injection by an attacker who can create a file in the current working directory.5.3CISA ADP v3.10.5%2024-12-13Fix
CVE-2024-55890man-group dtale D-Tale allows remote code execution through the Custom Filter Input6.9CNA v4.02.4%2024-12-13NucleiFix
CVE-2024-55889phpMyFAQ vulnerable to Unintended File Download Triggered by Embedded Frames4.9CNA v3.12.2%2024-12-13Exploit codeFix
CVE-2024-55887Ucum-java has an XXE vulnerability in XML parsing8.6CNA v3.10.6%2024-12-13Fix
CVE-2024-55661Laravel Pulse allows remote code execution via Unprotected Query method8.7CNA v4.029.5%2024-12-13Exploit codeFix
CVE-2024-54351Fancy Roller Scroller WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2024-12-13Fix
CVE-2024-54349Plain Post WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-12-13Fix
CVE-2024-54347FloristPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54346Barter WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-12-13Fix
CVE-2024-54345Bicycleshop WordPress theme cross-site scripting (XSS)6.5CNA v3.10.3%2024-12-13Fix
CVE-2024-54344WP Quick Shop WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54343Connect Contact Form 7 to Constant Contact WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54342Staggs WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54341LabelGrid Tools WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54340Simple Presenter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54339geoFlickr WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54338Hello Event Widgets For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-12-13Fix
CVE-2024-54337DX Dark Site WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.2%2024-12-13Fix
CVE-2024-54336Projectopia WordPress plugin account takeover8.8CNA v3.10.7%2024-12-13Fix
CVE-2024-54335ImmoToolBox Connect WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54334Quran Phrases About Most People Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-12-13Fix
CVE-2024-54333silverplugins217 Check Pincode For Woocommerce reflected cross-site scripting7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54330Hurrakify WordPress plugin server side request forgery (SSRF)7.2CNA v3.11.5%2024-12-13NucleiExploit codeFix
CVE-2024-54329CleverNode Related Content WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54328Invoice Payment for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54327UNIVERSAM WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54326GEO my WP WordPress plugin broken access control6.5CNA v3.10.5%2024-12-13Fix
CVE-2024-54325CarDealerPress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54324SMSify WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54323New User Approve WordPress plugin broken access control5.4CNA v3.10.3%2024-12-13Fix
CVE-2024-54322Media Downloader WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54321Hive Support WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-12-13Fix
CVE-2024-54320ICDSoft Reseller Store WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54319Kundgenerator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54318NiceJob WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13Fix
CVE-2024-54317Web Stories WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2024-12-13Fix
CVE-2024-54316Restaurant and Cafe Addon for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-12-13Fix
CVE-2024-54315Events Addon for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-12-13Fix
CVE-2024-54314Primary Addon for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2024-12-13Fix
CVE-2024-54313FULL Cliente WordPress plugin local file inclusion6.5CNA v3.10.7%2024-12-13Fix
CVE-2024-54312افزونه پیامک ووکامرس Persian WooCommerce SMS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54311Mark New Posts WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13Fix
CVE-2024-54310Gou Manage My Account Menu WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2024-54309PostBox WordPress plugin sensitive data exposure6.5CNA v3.10.7%2024-12-13Fix
CVE-2024-54308Cryptocurrency Price Widget WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2024-12-13Fix
CVE-2024-54307AIcomments WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-12-13Fix
CVE-2024-54306AIKCT Engine Chatbot WordPress plugin aitool cross-site request forgery4.3CNA v3.10.2%2024-12-13Fix
CVE-2024-54305J&T Express Malaysia WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54304Hive Support WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-13Fix
CVE-2024-54303Simple Payment WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54302Vikas Ratudi VPSUForm reflected cross-site scripting7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54301FormFacade WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.4%2024-12-13Fix
CVE-2024-54300AutoWP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-12-13Fix
CVE-2024-54299Revi.io WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54298Car Dealer WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13Fix
CVE-2024-54297vBSSO-lite WordPress plugin account takeover9.8CNA v3.10.8%2024-12-13
CVE-2024-54296CoSchool LMS WordPress plugin account takeover9.8CNA v3.10.8%2024-12-13
CVE-2024-54295ListApp Mobile Manager WordPress plugin account takeover9.8CNA v3.10.8%2024-12-13
CVE-2024-54294Firebase OTP Authentication WordPress plugin account takeover9.8CNA v3.10.8%2024-12-13
CVE-2024-54293CE21 Suite WordPress plugin privilege escalation9.8CNA v3.10.6%2024-12-13Fix
CVE-2024-54292Appsplate WordPress plugin SQL injection9.3CNA v3.10.8%2024-12-13Exploit code
CVE-2024-54290Role Includer WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54289Awesome Support WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13Fix
CVE-2024-54288LDD Directory Lite WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54287Advanced Blog Post Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54286Smaily for WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13Fix
CVE-2024-54282WP Mega Menu WordPress plugin PHP object injection7.2CNA v3.10.8%2024-12-13
CVE-2024-54278News Ticker for Elementor WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13
CVE-2024-54277Nias course WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54276Poll Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54275CSV to html WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54274Octrace Support WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54273Mail Picker WordPress plugin PHP object injection9.8CNA v3.10.7%2024-12-13Fix
CVE-2024-54272Radius Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13Fix
CVE-2024-54271WPCargo Track and Trace WordPress plugin settings Change vulnerability5.4CNA v3.10.5%2024-12-13
CVE-2024-54268SiteOrigin Widgets Bundle WordPress plugin broken access control8.8v3.10.6%2024-12-13Fix
CVE-2024-54267CM Answers WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13Fix
CVE-2024-54266ImageRecycle pdf and image compression WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.4%2024-12-13Fix
CVE-2024-54265Barcode Scanner and Inventory manager WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13Fix
CVE-2024-54264Shortcodes Blocks Creator Ultimate WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54262Import Export For WooCommerce WordPress plugin arbitrary file upload9.9CNA v3.11.5%2024-12-13Exploit code
CVE-2024-54261TAX SERVICE Electronic HDM WordPress plugin SQL injection10.0CNA v3.10.7%2024-12-13Fix
CVE-2024-54259DELUCKS SEO WordPress plugin arbitrary file download6.5CNA v3.10.7%2024-12-13
CVE-2024-54258Ni CRM Lead WordPress plugin SQL injection8.5CNA v3.10.5%2024-12-13
CVE-2024-54256Easy Blocks pro WordPress plugin broken access control7.1CNA v3.10.5%2024-12-13
CVE-2024-54252Pinpoint Booking System WordPress plugin broken access control6.3CNA v3.10.5%2024-12-13Fix
CVE-2024-54250Prodigy Commerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13Fix
CVE-2024-54248Eewee Admin Custom WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2024-12-13
CVE-2024-54246FAQs WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54245Clients WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54244Easy Replace WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54243Echoza WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13
CVE-2024-54242Simple Notification WordPress plugin broken access control6.5CNA v3.10.4%2024-12-13
CVE-2024-54241Elite Notification WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2024-12-13Fix
CVE-2024-54240Blaze Online eParcel for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54239Eyewear prescription form WordPress plugin arbitrary option update to privilege escalation9.8CNA v3.10.9%2024-12-13Exploit codeFix
CVE-2024-54238Board Document Manager from CHUHPL WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54237Ni CRM Lead WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54236Ni WooCommerce Bulk Product Editor WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54235Shiptimize for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54234wp-buy Limit Login Attempts SQL injection9.3CNA v3.10.5%2024-12-13Fix
CVE-2024-54233Advanced Control Manager WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54231Ni WooCommerce Order Export WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-12-13
CVE-2024-54139Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter7.9CNA v3.10.2%2024-12-13Fix
CVE-2024-52066RTI Connext Professional buffer overflow8.3CNA v4.00.3%2024-12-13Fix
CVE-2024-52065RTI Connext Professional buffer overflow6.9CNA v4.00.2%2024-12-13Fix
CVE-2024-52064Potential stack buffer write overflow in Connext applications while parsing malicious license file6.9CNA v4.00.2%2024-12-13Fix
CVE-2024-52063RTI Connext Professional buffer overflow8.3CNA v4.00.3%2024-12-13Fix
CVE-2024-52062RTI Connext Professional buffer overflow6.9CNA v4.00.2%2024-12-13Fix
CVE-2024-52061RTI Connext Professional potential stack buffer overflow when parsing an XML type8.3CNA v4.00.5%2024-12-13Fix
CVE-2024-52060RTI Connext Professional potential stack overflow when8.3CNA v4.00.3%2024-12-13Fix
CVE-2024-52059RTI Connext Professional Security Plugins heap-based buffer overflow6.9CNA v4.00.2%2024-12-13Fix
CVE-2024-52058RTI Connext Professional OS command improper neutralization8.6CNA v4.00.6%2024-12-13Fix
CVE-2024-52057RTI Connext Professional SQL command improper neutralization9.1CNA v4.00.4%2024-12-13Fix
CVE-2024-48008Dell RecoverPoint for Virtual Machines OS command injection5.3CNA v3.10.6%2024-12-13Fix
CVE-2024-48007Dell RecoverPoint for Virtual Machines hard-coded credentials5.3CNA v3.10.4%2024-12-13Fix
CVE-2024-47984Dell RecoverPoint for Virtual Machines denial of service4.4CNA v3.10.5%2024-12-13Fix
CVE-2024-47892Imagination Technologies Graphics DDK PMRUnlockPhysAddressesOSMem memory unlock use-after-free7.8CISA ADP v3.10.1%2024-12-13Fix
CVE-2024-46971GPU DDK UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems7.8CISA ADP v3.10.1%2024-12-13
CVE-2024-38488Dell RecoverPoint for Virtual Machines missing brute-force protection6.5CNA v3.10.3%2024-12-13Fix
CVE-2024-28980Dell RecoverPoint for Virtual Machines weak cryptographic algorithm6.5CNA v3.10.6%2024-12-13Fix
CVE-2024-24902Dell RecoverPoint for Virtual Machines improper access control6.6CNA v3.10.2%2024-12-13Fix
CVE-2024-22461Dell RecoverPoint for Virtual Machines improper signature verification8.8CNA v3.10.8%2024-12-13Fix
CVE-2024-21577hay86 ComfyUI-Ace-Nodes code injection10.0CNA v4.00.6%2024-12-13
CVE-2024-21576bmad4ever ComfyUI-Bmad-Nodes code injection10.0CNA v4.00.6%2024-12-13
CVE-2024-21544Browsershot local file inclusion7.7CNA v4.00.6%2024-12-13Fix
CVE-2024-21543djoser authentication bypass5.7CNA v4.00.5%2024-12-13Fix
CVE-2024-12603TECNO com.transsion.applock client-side enforcement of server-side security9.8CISA ADP v3.10.6%2024-12-13
CVE-2024-12581Kadence Blocks WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.5%2024-12-13Fix
CVE-2024-12579Minify HTML WordPress plugin Regular Expressions denial of service5.3CNA v3.10.3%2024-12-13Fix
CVE-2024-12574SVG Shortcode WordPress plugin authenticated (Author+) stored cross-site scripting via SVG upload5.4CNA v3.10.3%2024-12-13
CVE-2024-12572Hello in All Languages WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2024-12-13
CVE-2024-12553GeoVision GV-ASManager missing authorization information disclosure6.5CNA v3.00.6%2024-12-13
CVE-2024-12552Wacom Center WTabletServicePro link following local privilege escalation7.8v3.10.2%2024-12-13Fix
CVE-2024-12465Property Hive Stamp Duty Calculator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-13Fix
CVE-2024-12421elliotvs Coupon Affiliates shortcode execution arbitrary code execution6.5CNA v3.10.5%2024-12-13Fix
CVE-2024-12420AmauriC WPMobile.App shortcode execution arbitrary code execution6.5CNA v3.10.4%2024-12-13Fix
CVE-2024-12417Simple Link Directory WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.5%2024-12-13Fix
CVE-2024-12414Themify Store Locator WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-12-13Fix
CVE-2024-12309Rate My Post WordPress plugin insecure direct object reference5.3CNA v3.10.3%2024-12-13Fix
CVE-2024-12300AR for WordPress plugin missing authorization to unauthenticated limited file upload3.7CNA v3.10.4%2024-12-13Fix
CVE-2024-12212Horner Automation Cscape out-of-bounds read8.5CNA v4.00.2%2024-12-13Fix
CVE-2024-12042MStore API Create Native Android and iOS Apps On The Cloud WordPress plugin HTML file upload5.4CNA v3.10.3%2024-12-13Fix
CVE-2024-11986Stored XSS in CrushFTP9.6CNA v3.10.6%2024-12-13Fix
CVE-2024-11911WP Crowdfunding WordPress plugin missing authorization authenticated WooCommerce installation4.3CNA v3.10.3%2024-12-13Fix
CVE-2024-11910WP Crowdfunding WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-12-13Fix
CVE-2024-11839PlexTrac insecure deserialization via Runbooks Imports8.6CNA v4.00.4%2024-12-13Fix
CVE-2024-11838PlexTrac local file inclusion8.6CNA v4.00.4%2024-12-13Fix
CVE-2024-11837PlexTrac N1QL injection8.6CNA v4.00.5%2024-12-13Fix
CVE-2024-11836PlexTrac server-side request forgery8.6CNA v4.00.3%2024-12-13Fix
CVE-2024-11835PlexTrac denial of service7.0CNA v4.00.4%2024-12-13Fix
CVE-2024-11834PlexTrac arbitrary file write via PTRAC Import8.9CNA v4.00.5%2024-12-13Fix
CVE-2024-11833PlexTrac Arbitrary Directory Write via Runbooks Artifact upload8.9CNA v4.00.5%2024-12-13Fix
CVE-2024-11832Beaver Builder WordPress Page Builder plugin stored cross-site scripting5.4v3.10.2%2024-12-13Fix
CVE-2024-11827Out of the Block: OpenStreetMap WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-13Fix
CVE-2024-11809Primer MyData for Woocommerce WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-13Fix
CVE-2024-11767NewsmanApp WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-13Fix
CVE-2024-11754Booking System Trafft WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-13Fix
CVE-2024-11275Arraytics Timetics customers REST API endpoint missing authorization4.3CNA v3.10.3%2024-12-13Fix
CVE-2024-11012Notibar Notification Bar for WordPress plugin arbitrary shortcode execution via njt_nofi_text6.3CNA v3.10.5%2024-12-13Fix
CVE-2024-10939Image Widget WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2024-12-13Fix
CVE-2024-10783MainWP Child WordPress plugin missing authorization to unauthenticated privilege escalation8.1CNA v3.12.4%2024-12-13NucleiFix
CVE-2024-10678Ultimate Blocks WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.3%2024-12-13Fix
CVE-2024-9945Limited information disclosure in GoAnywhere MFT5.3CNA v3.10.3%2024-12-13Fix
CVE-2024-9608MyParcel WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-13Fix
CVE-2024-9508Horner Automation Cscape out-of-bounds read8.5CNA v4.00.2%2024-12-13Fix
CVE-2024-9290Super Backup and Clone - Migrate for WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.13.5%2024-12-13Exploit codeFix
CVE-2024-55888scidsg hushline content Security Policy appears to be missing in software and production setup7.1CNA v3.10.3%2024-12-12Fix
CVE-2024-55886OpenSearch Data Prepper OpenTelemetry Logs source improper authentication6.9CNA v3.10.3%2024-12-12Fix
CVE-2024-55885Beego vulnerable to Collision Hazards of MD5 in Cache Key Filenames6.9CNA v4.00.3%2024-12-12Fix
CVE-2024-55884Mullvad VPN client exception-handling stack out-of-bounds write9.0CNA v3.11.3%2024-12-12
CVE-2024-55879XWiki allows RCE from script right in configurable sections9.1CNA v3.11.1%2024-12-12Fix
CVE-2024-55878Shuchkin SimpleXLSX toHTMLEx method cross-site scripting6.8CNA v3.10.5%2024-12-12Fix
CVE-2024-55877XWiki allows remote code execution from account10.0CNA v3.11.6%2024-12-12Fix
CVE-2024-55876XWiki's scheduler in subwiki allows scheduling operations for any main wiki user5.4CNA v3.00.6%2024-12-12Fix
CVE-2024-55875http4k has a potential XXE (XML external entity injection)9.8CNA v3.11.9%2024-12-12Exploit codeFix
CVE-2024-55663XWiki Platform has an SQL injection in getdocuments.vm with sort parameter8.6CNA v4.00.8%2024-12-12Fix
CVE-2024-55662XWiki allows remote code execution through the extension sheet10.0CNA v3.10.8%2024-12-12Fix
CVE-2024-55660SiYuan has an SSTI via /API/template/renderSprig6.9CNA v4.00.6%2024-12-12Fix
CVE-2024-55659SiYuan has an arbitrary file write in the host via /API/asset/upload8.7CNA v4.00.4%2024-12-12Fix
CVE-2024-55658SiYuan has an arbitrary file read and path traversal via /API/export/exportResources8.7CNA v4.00.6%2024-12-12Fix
CVE-2024-55657SiYuan has an arbitrary file read via /API/template/render8.7CNA v4.00.7%2024-12-12Fix
CVE-2024-55652PwnDoc server-side template injection vulnerability sandbox escape to RCE using custom filters6.5CNA v3.10.7%2024-12-12
CVE-2024-55633Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access7.1CNA v4.02.8%2024-12-12Fix
CVE-2024-55587Python-libarchive directory traversal8.8CISA ADP v3.12.1%2024-12-12Exploit code
CVE-2024-55099PHPGurukul Online Nurse Hiring System SQL injection9.8CISA ADP v3.11.0%2024-12-12Exploit code
CVE-2024-54842PHPGurukul Online Nurse Hiring System SQL injection9.8CISA ADP v3.10.5%2024-12-12
CVE-2024-54811PHPGurukul Park Ticketing Management System /index.php SQL injection9.8CISA ADP v3.10.6%2024-12-12
CVE-2024-54810PHPGurukul Pre-School Enrollment System SQL injection9.8CISA ADP v3.11.0%2024-12-12
CVE-2024-54534Apple Safari out-of-bounds write9.8v3.11.1%2024-12-12Fix
CVE-2024-54531The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR.5.5v3.10.2%2024-12-12Fix
CVE-2024-54529Apple macOS code injection7.8v3.10.3%2024-12-12Fix
CVE-2024-54528Apple macOS logic flaw7.1v3.10.2%2024-12-12Fix
CVE-2024-54527Apple macOS information disclosure5.5v3.10.3%2024-12-12Fix
CVE-2024-54526Apple iOS and iPadOS information disclosure5.5v3.13.2%2024-12-12Fix
CVE-2024-54524Apple macOS type confusion5.5v3.10.2%2024-12-12Fix
CVE-2024-54515Apple macOS improper preservation of permissions7.8v3.10.2%2024-12-12Fix
CVE-2024-54514Apple macOS sandbox escape8.6v3.10.3%2024-12-12Fix
CVE-2024-54513Apple macOS improper preservation of permissions5.5v3.10.3%2024-12-12Fix
CVE-2024-54510Apple iPadOS race condition5.1v3.10.2%2024-12-12Fix
CVE-2024-54508Apple Safari out-of-bounds read7.5v3.11.0%2024-12-12Fix
CVE-2024-54506Apple macOS out-of-bounds read9.8v3.10.7%2024-12-12Fix
CVE-2024-54505Apple Safari type confusion8.8v3.11.1%2024-12-12Fix
CVE-2024-54504Apple macOS insecure storage of sensitive information5.5v3.10.2%2024-12-12Fix
CVE-2024-54503An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2. Muting a call while ringing may not result in mute being enabled.4.2v3.10.4%2024-12-12Fix
CVE-2024-54502Apple Safari out-of-bounds read6.5v3.117.1%2024-12-12Fix
CVE-2024-54501Apple iPadOS resource exhaustion5.5v3.10.3%2024-12-12Fix
CVE-2024-54500Apple iOS and iPadOS image processing information disclosure5.5v3.10.3%2024-12-12Fix
CVE-2024-54498Apple macOS sandbox escape8.8v3.11.1%2024-12-12Exploit codeFix
CVE-2024-54495Apple macOS incorrect authorization5.5v3.10.3%2024-12-12Fix
CVE-2024-54494Apple iPadOS race condition5.9v3.10.8%2024-12-12Fix
CVE-2024-54493Apple macOS microphone privacy indicator vulnerability3.3v3.10.2%2024-12-12Fix
CVE-2024-54492This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic.5.9NVD v3.10.9%2024-12-12Fix
CVE-2024-54491Apple macOS location services logging vulnerability3.3NVD v3.10.2%2024-12-12Fix
CVE-2024-54490Apple macOS origin validation error5.5v3.10.1%2024-12-12Fix
CVE-2024-54489Apple macOS path traversal7.8v3.10.4%2024-12-12Fix
CVE-2024-54486Apple iOS and iPadOS font processing information disclosure6.5v3.11.4%2024-12-12Fix
CVE-2024-54485Apple iPadOS insecure storage of sensitive information2.4NVD v3.10.3%2024-12-12Fix
CVE-2024-54484Apple macOS improper preservation of permissions5.5v3.10.2%2024-12-12Fix
CVE-2024-54479Apple Safari denial of service7.5v3.11.6%2024-12-12Fix
CVE-2024-54477Apple macOS insecure storage of sensitive information5.5v3.10.3%2024-12-12Fix
CVE-2024-54476Apple macOS observable discrepancy5.5v3.10.3%2024-12-12Fix
CVE-2024-54474Apple macOS information disclosure5.5v3.10.3%2024-12-12Fix
CVE-2024-54471Apple macOS insufficiently protected credentials5.5v3.10.2%2024-12-12Fix
CVE-2024-54466Apple macOS missing authorization5.3v3.10.7%2024-12-12Fix
CVE-2024-54465Apple macOS improper preservation of permissions9.8v3.10.9%2024-12-12Fix
CVE-2024-54122Huawei HarmonyOS concurrent variable access vulnerability in the ability module6.2CNA v3.10.1%2024-12-12Fix
CVE-2024-54119Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module6.2CNA v3.10.2%2024-12-12Fix
CVE-2024-54117Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module6.2CNA v3.10.3%2024-12-12Fix
CVE-2024-54116Huawei HarmonyOS out-of-bounds read vulnerability in the M3U8 module4.3CNA v3.10.2%2024-12-12Fix
CVE-2024-54115Huawei HarmonyOS out-of-bounds read vulnerability in the DASH module4.3CNA v3.10.2%2024-12-12Fix
CVE-2024-54114Huawei HarmonyOS out-of-bounds access vulnerability in playback in the DASH module4.4CNA v3.10.2%2024-12-12Fix
CVE-2024-54113Huawei HarmonyOS process residence vulnerability in abnormal scenarios in the print module6.5CNA v3.10.3%2024-12-12Fix
CVE-2024-54112Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module5.5CNA v3.10.2%2024-12-12Fix
CVE-2024-54111Huawei HarmonyOS Read/Write vulnerability in the image decoding module5.7CNA v3.10.1%2024-12-12Fix
CVE-2024-54110Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module6.2CNA v3.10.3%2024-12-12Fix
CVE-2024-54109Huawei HarmonyOS Read/Write vulnerability in the image decoding module6.5CNA v3.10.3%2024-12-12Fix
CVE-2024-54108Huawei HarmonyOS Read/Write vulnerability in the image decoding module6.5CNA v3.10.2%2024-12-12Fix
CVE-2024-54107Huawei HarmonyOS Read/Write vulnerability in the image decoding module7.1CNA v3.10.2%2024-12-12Fix
CVE-2024-54106Huawei HarmonyOS null pointer dereference vulnerability in the image decoding module7.1CNA v3.10.3%2024-12-12Fix
CVE-2024-54105Huawei HarmonyOS Read/Write vulnerability in the image decoding module5.1CNA v3.10.2%2024-12-12Fix
CVE-2024-54104Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module6.2CNA v3.10.2%2024-12-12Fix
CVE-2024-54103Huawei HarmonyOS vulnerability of improper access control in the album module6.1CNA v3.10.2%2024-12-12Fix
CVE-2024-54102Huawei HarmonyOS race condition vulnerability in the DDR module6.1CNA v3.10.1%2024-12-12Fix
CVE-2024-54101Huawei HarmonyOS denial of service (DoS) vulnerability in the installation module6.2CNA v3.10.1%2024-12-12Fix
CVE-2024-54100Huawei HarmonyOS vulnerability of improper access control in the secure input module6.2CNA v3.10.2%2024-12-12Fix
CVE-2024-54099Huawei HarmonyOS file replacement vulnerability on some devices6.7CNA v3.10.1%2024-12-12Fix
CVE-2024-54098Huawei HarmonyOS service logic error vulnerability in the system service module8.5CNA v3.10.2%2024-12-12Fix
CVE-2024-54097Huawei HarmonyOS security vulnerability in the HiView module7.3CNA v3.10.3%2024-12-12Fix
CVE-2024-54096Huawei HarmonyOS vulnerability of improper access control in the MTP module5.3CNA v3.10.1%2024-12-12Fix
CVE-2024-53845espressif esp-idf AES/CBC Constant IV vulnerability in ESPTouch v26.6CNA v4.00.6%2024-12-12Fix
CVE-2024-53274GHSL-2024-111: Reflected XSS in /home in habitica6.1NVD v3.10.5%2024-12-12Fix
CVE-2024-53273GHSL-2024-110: Reflected XSS in /register in habitica6.1NVD v3.10.5%2024-12-12Fix
CVE-2024-53272GHSL-2024-109: Reflected XSS in /login in habitica6.1NVD v3.10.5%2024-12-12Fix
CVE-2024-52901IBM InfoSphere Information Server denial of service6.5CNA v3.10.5%2024-12-12Fix
CVE-2024-50584Image Access Scan2Net SQL injection4.4CISA ADP v3.10.3%2024-12-12Fix
CVE-2024-50339GLPI vulnerable to unauthenticated session hijacking9.3CNA v4.018.7%2024-12-12Emerging ThreatsFix
CVE-2024-49147Microsoft Update Catalog elevation of privilege9.3CNA v3.11.3%2024-12-12Fix
CVE-2024-49142Microsoft Access remote code execution7.8CNA v3.11.1%2024-12-12Fix
CVE-2024-49138Microsoft Windows Common Log File System (CLFS) driver heap-based buffer overflow7.8CNA v3.126.2%2024-12-12KEVExploit codeFix
CVE-2024-49132Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.1%2024-12-12Fix
CVE-2024-49129Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service7.5CNA v3.10.8%2024-12-12Fix
CVE-2024-49128Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.2%2024-12-12Fix
CVE-2024-49127Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution8.1CNA v3.11.3%2024-12-12Fix
CVE-2024-49126Microsoft Windows Local Security Authority subsystem Service (LSASS) remote code execution8.1CNA v3.11.3%2024-12-12Fix
CVE-2024-49125Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.5%2024-12-12Fix
CVE-2024-49124Microsoft Windows lightweight Directory Access Protocol (LDAP) client remote code execution8.1CNA v3.11.4%2024-12-12Fix
CVE-2024-49123Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.1%2024-12-12Fix
CVE-2024-49122Microsoft Message Queuing (MSMQ) remote code execution8.1CNA v3.120.7%2024-12-12Fix
CVE-2024-49121Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service7.5CNA v3.12.4%2024-12-12Fix
CVE-2024-49120Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.1%2024-12-12Fix
CVE-2024-49119Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.2%2024-12-12Fix
CVE-2024-49118Microsoft Message Queuing (MSMQ) remote code execution8.1CNA v3.11.4%2024-12-12Fix
CVE-2024-49117Microsoft Windows Hyper-V remote code execution8.8CNA v3.11.0%2024-12-12Fix
CVE-2024-49116Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.110.2%2024-12-12Fix
CVE-2024-49115Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.1%2024-12-12Fix
CVE-2024-49114Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.7%2024-12-12Fix
CVE-2024-49113Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service7.5CNA v3.183.6%2024-12-12Emerging ThreatsExploit codeFix
CVE-2024-49112Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution9.8CNA v3.172.2%2024-12-12Exploit codeFix
CVE-2024-49111Microsoft Windows Wireless Wide Area Network Service (WwanSvc) elevation of privilege6.6CNA v3.10.8%2024-12-12Fix
CVE-2024-49110Microsoft Windows Mobile Broadband driver elevation of privilege6.8CNA v3.10.9%2024-12-12Fix
CVE-2024-49109Microsoft Windows Wireless Wide Area Network Service (WwanSvc) elevation of privilege6.6CNA v3.10.9%2024-12-12Fix
CVE-2024-49108Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.2%2024-12-12Fix
CVE-2024-49107Microsoft Windows WmsRepair service elevation of privilege7.3CNA v3.11.9%2024-12-12Fix
CVE-2024-49106Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.2%2024-12-12Fix
CVE-2024-49105Microsoft Remote Desktop client remote code execution8.4CNA v3.11.5%2024-12-12Fix
CVE-2024-49104Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.7%2024-12-12Fix
CVE-2024-49103Microsoft Windows Wireless Wide Area Network Service (WwanSvc) information disclosure4.3CNA v3.11.0%2024-12-12Fix
CVE-2024-49102Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.7%2024-12-12Fix
CVE-2024-49101Microsoft Windows Wireless Wide Area Network Service (WwanSvc) elevation of privilege6.6CNA v3.10.9%2024-12-12Fix
CVE-2024-49099Microsoft Windows Wireless Wide Area Network Service (WwanSvc) information disclosure4.3CNA v3.11.0%2024-12-12Fix
CVE-2024-49098Microsoft Windows Wireless Wide Area Network Service (WwanSvc) information disclosure4.3CNA v3.11.0%2024-12-12Fix
CVE-2024-49097Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.4%2024-12-12Fix
CVE-2024-49096Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.9%2024-12-12Fix
CVE-2024-49095Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.0CNA v3.10.4%2024-12-12Fix
CVE-2024-49094Microsoft Windows Wireless Wide Area Network Service (WwanSvc) elevation of privilege6.6CNA v3.10.8%2024-12-12Fix
CVE-2024-49093Microsoft Windows Resilient File System (ReFS) elevation of privilege8.8CNA v3.10.9%2024-12-12Fix
CVE-2024-49092Microsoft Windows Mobile Broadband driver elevation of privilege6.8CNA v3.10.8%2024-12-12Fix
CVE-2024-49091Microsoft Windows Domain Name service remote code execution7.2CNA v3.11.7%2024-12-12Fix
CVE-2024-49090Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.11.1%2024-12-12Fix
CVE-2024-49089Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.2CNA v3.12.1%2024-12-12Fix
CVE-2024-49088Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.11.0%2024-12-12Fix
CVE-2024-49087Microsoft Windows Mobile Broadband driver information disclosure4.6CNA v3.10.9%2024-12-12Fix
CVE-2024-49086Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-12-12Fix
CVE-2024-49085Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.6%2024-12-12Fix
CVE-2024-49084Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.4%2024-12-12Fix
CVE-2024-49083Microsoft Windows Mobile Broadband driver elevation of privilege6.8CNA v3.10.8%2024-12-12Fix
CVE-2024-49082Microsoft Windows File Explorer information disclosure6.8CNA v3.11.5%2024-12-12Fix
CVE-2024-49081Microsoft Windows Wireless Wide Area Network Service (WwanSvc) elevation of privilege6.6CNA v3.10.8%2024-12-12Fix
CVE-2024-49080Microsoft Windows IP Routing Management Snapin remote code execution8.8CNA v3.11.7%2024-12-12Fix
CVE-2024-49079Microsoft Windows input Method Editor (IME) remote code execution7.8CNA v3.11.0%2024-12-12Fix
CVE-2024-49078Microsoft Windows Mobile Broadband driver elevation of privilege6.8CNA v3.10.9%2024-12-12Fix
CVE-2024-49077Microsoft Windows Mobile Broadband driver elevation of privilege6.8CNA v3.10.9%2024-12-12Fix
CVE-2024-49076Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege7.8CNA v3.11.2%2024-12-12Fix
CVE-2024-49075Microsoft Windows Remote Desktop services denial of service7.5CNA v3.12.6%2024-12-12Fix
CVE-2024-49074Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.10.6%2024-12-12Fix
CVE-2024-49073Microsoft Windows Mobile Broadband driver elevation of privilege6.8CNA v3.10.9%2024-12-12Fix
CVE-2024-49072Microsoft Windows Task Scheduler elevation of privilege7.8CNA v3.10.6%2024-12-12Fix
CVE-2024-49071Windows Defender information disclosure6.5CNA v3.11.1%2024-12-12Fix
CVE-2024-49070Microsoft SharePoint remote code execution7.4CNA v3.12.3%2024-12-12Fix
CVE-2024-49069Microsoft Excel remote code execution7.8CNA v3.11.2%2024-12-12Fix
CVE-2024-49068Microsoft SharePoint elevation of privilege8.2CNA v3.11.6%2024-12-12Fix
CVE-2024-49065Microsoft Office remote code execution5.5CNA v3.11.1%2024-12-12Fix
CVE-2024-49064Microsoft SharePoint information disclosure6.5CNA v3.12.5%2024-12-12Fix
CVE-2024-49063Microsoft/Muzic remote code execution8.4CNA v3.11.7%2024-12-12Fix
CVE-2024-49062Microsoft SharePoint information disclosure6.5CNA v3.13.2%2024-12-12Fix
CVE-2024-49059Microsoft Office elevation of privilege7.0CNA v3.10.4%2024-12-12Fix
CVE-2024-49057Microsoft Defender For Endpoint on Android spoofing8.1CNA v3.11.7%2024-12-12Fix
CVE-2024-47947Image Access Scan2Net stored cross-site scripting4.7CISA ADP v3.10.5%2024-12-12Fix
CVE-2024-47835GHSL-2024-263: GStreamer null-pointer dereference in LRC subtitle parser7.5NVD v3.11.0%2024-12-12Fix
CVE-2024-47834GHSL-2024-280: GStreamer use-after-free read in Matroska CodecPrivate9.1NVD v3.10.9%2024-12-12Fix
CVE-2024-47778GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk7.5NVD v3.10.8%2024-12-12Fix
CVE-2024-47777GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk9.1NVD v3.11.2%2024-12-12Fix
CVE-2024-47776GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk9.1NVD v3.11.2%2024-12-12Fix
CVE-2024-47775GHSL-2024-261: GStreamer has an OOB-read in parse_ds649.1NVD v3.11.2%2024-12-12Fix
CVE-2024-47774GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk9.1NVD v3.10.8%2024-12-12Fix
CVE-2024-47615GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer9.8NVD v3.11.1%2024-12-12Fix
CVE-2024-47613GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush9.8NVD v3.10.9%2024-12-12Fix
CVE-2024-47607GStreamer GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header9.8NVD v3.11.2%2024-12-12Fix
CVE-2024-47606GStreamer MP4/MOV demuxer integer overflow9.8NVD v3.11.4%2024-12-12Fix
CVE-2024-47603GHSL-2024-251: GStreamer null-pointer dereference in Matroska/WebM demuxer7.5NVD v3.10.9%2024-12-12Fix
CVE-2024-47602GStreamer Matroska demuxer null pointer dereference7.5NVD v3.10.9%2024-12-12Fix
CVE-2024-47601GHSL-2024-249: GStreamer has a null-pointer dereference in Matroska/WebM demuxer7.5NVD v3.10.9%2024-12-12Fix
CVE-2024-47600GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask9.1NVD v3.11.1%2024-12-12Fix
CVE-2024-47599GStreamer JPEG decoder null pointer dereference7.5NVD v3.10.9%2024-12-12Fix
CVE-2024-47598GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table9.1NVD v3.10.9%2024-12-12Fix
CVE-2024-47597GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples9.1NVD v3.11.2%2024-12-12Fix
CVE-2024-47596GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing7.5NVD v3.11.1%2024-12-12Fix
CVE-2024-47546GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read7.5NVD v3.11.1%2024-12-12Fix
CVE-2024-47545GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read7.5NVD v3.11.1%2024-12-12Fix
CVE-2024-47544GHSL-2024-238: GStreamer has null-pointer dereferences in MP4/MOV demuxer CENC handling7.5NVD v3.11.1%2024-12-12Fix
CVE-2024-47543GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container7.5NVD v3.10.9%2024-12-12Fix
CVE-2024-47542GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and null-pointer dereference7.5NVD v3.11.1%2024-12-12Fix
CVE-2024-47541GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser7.5NVD v3.11.3%2024-12-12Fix
CVE-2024-47540GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer9.8NVD v3.11.0%2024-12-12Fix
CVE-2024-47539GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a9.8NVD v3.11.3%2024-12-12Fix
CVE-2024-47538GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet9.8NVD v3.11.3%2024-12-12Fix
CVE-2024-47537GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c9.8NVD v3.11.0%2024-12-12Fix
CVE-2024-47238Dell Client Platform BIOS improper input validation7.5CNA v3.10.2%2024-12-12Fix
CVE-2024-45404OpenCTI's lack of Rate Limit lead to OTP brute forcing8.1CNA v3.10.6%2024-12-12Fix
CVE-2024-45337Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1CISA ADP v3.13.2%2024-12-12Exploit codeFix
CVE-2024-44300Apple macOS logic flaw5.5v3.10.3%2024-12-12Fix
CVE-2024-44299Apple macOS arbitrary code execution9.8v3.10.5%2024-12-12Fix
CVE-2024-44291Apple macOS logic flaw7.8v3.10.3%2024-12-12Fix
CVE-2024-44290Apple iOS, iPadOS, macOS and watchOS location services vulnerability3.3v3.10.2%2024-12-12Fix
CVE-2024-44248Apple macOS screen sharing information disclosure6.5v3.10.8%2024-12-12Fix
CVE-2024-44246Apple Safari out-of-bounds read5.3v3.11.2%2024-12-12Fix
CVE-2024-44245Apple iPadOS out-of-bounds write7.1v3.10.3%2024-12-12Fix
CVE-2024-44243Apple macOS file system protections vulnerability5.5v3.10.6%2024-12-12Fix
CVE-2024-44242Apple macOS out-of-bounds write9.8v3.10.6%2024-12-12Fix
CVE-2024-44241Apple macOS resource exhaustion9.8v3.10.6%2024-12-12Fix
CVE-2024-44225Apple iPadOS logic flaw7.8v3.10.3%2024-12-12Fix
CVE-2024-44224Apple macOS incorrect default permissions7.8v3.10.3%2024-12-12Fix
CVE-2024-44220Apple macOS unrestricted file upload5.5v3.10.6%2024-12-12Fix
CVE-2024-44212Apple Safari origin validation error5.3v3.10.3%2024-12-12Fix
CVE-2024-44201Apple iPadOS improper resource release5.5v3.10.3%2024-12-12Fix
CVE-2024-44200Apple macOS insecure storage of sensitive information3.3NVD v3.10.2%2024-12-12Fix
CVE-2024-43600Microsoft Office elevation of privilege7.8CNA v3.11.2%2024-12-12Fix
CVE-2024-43594Microsoft System Center elevation of privilege7.3CNA v3.11.7%2024-12-12Fix
CVE-2024-42448Veeam Service Provider Console code injection9.9CNA v3.019.9%2024-12-12Exploit code
CVE-2024-42407Gallagher Command Centre Server sensitive information in log files8.5CNA v3.10.3%2024-12-12Fix
CVE-2024-41146Gallagher Controller 6000 and Controller 7000 denial of service4.6CNA v3.10.3%2024-12-12Fix
CVE-2024-37401Ivanti Connect Secure IPsec out-of-bounds read7.5CNA v3.01.5%2024-12-12Fix
CVE-2024-37377Ivanti Connect Secure IPsec heap-based buffer overflow7.5CNA v3.01.8%2024-12-12Fix
CVE-2024-36498Image Access Scan2Net stored cross-site scripting4.7CISA ADP v3.10.6%2024-12-12Fix
CVE-2024-36494Image Access Scan2Net reflected cross-site scripting4.7CISA ADP v3.10.5%2024-12-12Fix
CVE-2024-31670rizin buffer overflow6.3CISA ADP v3.10.3%2024-12-12
CVE-2024-28146Image Access Scan2Net hard-coded credentials8.4CISA ADP v3.10.3%2024-12-12Fix
CVE-2024-28145Image Access Scan2Net unauthenticated SQL injection5.9CISA ADP v3.10.5%2024-12-12Fix
CVE-2024-28144Broken access control5.5CISA ADP v3.10.2%2024-12-12Fix
CVE-2024-28143Image Access Scan2Net Insecure Password Change function8.4CISA ADP v3.10.3%2024-12-12Fix
CVE-2024-28142Image Access Scan2Net stored cross-site scripting4.7CISA ADP v3.10.5%2024-12-12Fix
CVE-2024-21575ltdrdata ComfyUI-Impact-Pack path traversal9.2CNA v4.01.0%2024-12-12Fix
CVE-2024-21574ltdrdata ComfyUI-Manager code injection10.0CNA v4.01.1%2024-12-12Fix
CVE-2024-12570Privilege Context Switching Error in GitLab6.7CNA v3.10.4%2024-12-12Fix
CVE-2024-12564Exposure of sensitive information to an unauthorized actor vulnerability in ODA CDE inWEB SDK6.9CNA v4.00.7%2024-12-12Fix
CVE-2024-12536SourceCodester Kortex Lite Advocate Office Management System client_data.php cross-site scripting5.4v3.10.4%2024-12-12
CVE-2024-12526Arena.IM WordPress plugin cross-site request forgery4.3CNA v3.10.2%2024-12-12
CVE-2024-12503ClassCMS Model Management page admin cross-site scripting4.8v3.10.5%2024-12-12
CVE-2024-124971000 Projects Attendance Tracking Management System check_admin_login.php SQL injection9.8v3.10.9%2024-12-12
CVE-2024-12492code-projects Farmacia visualizar-usuario.php SQL injection8.8v3.10.7%2024-12-12
CVE-2024-12490code-projects Online Class and Exam Scheduling System teacher_save.php SQL injection9.8v3.10.8%2024-12-12
CVE-2024-12489code-projects Online Class and Exam Scheduling System term.php SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12488code-projects Online Class and Exam Scheduling System subject_update.php SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12487code-projects Online Class and Exam Scheduling System room_update.php SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12486code-projects Online Class and Exam Scheduling System rank_update.php SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12485code-projects Online Class and Exam Scheduling System department.php SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12484Codezips Technical Discussion Forum signuppost.php SQL injection9.8v3.11.0%2024-12-12Exploit code
CVE-2024-12483Dromara UJCMS User ID handler authorization bypass5.9v3.13.6%2024-12-12Exploit code
CVE-2024-12482cjbi wetech-cms Database Backup BackupFileUtil.java backup path traversal4.3v3.11.0%2024-12-12
CVE-2024-12481cjbi wetech-cms UserDao.java findUser SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12480cjbi wetech-cms TopicDao.java searchTopic SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12479cjbi wetech-cms TopicDao.java searchTopicByKeyword SQL injection8.8v3.10.6%2024-12-12
CVE-2024-12463Arena.IM Live Blogging for real-time events WordPress plugin stored cross-site scripting5.4v3.10.3%2024-12-12
CVE-2024-12461WP-Revive Adserver WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.5%2024-12-12
CVE-2024-12441BP Email Assign Templates WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12Fix
CVE-2024-12406Library Management System WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2024-12-12Fix
CVE-2024-12401Cert-manager: Potential DoS when parsing specially crafted pem inputs4.4CNA v3.10.7%2024-12-12Fix
CVE-2024-12397Io.quarkus.http/quarkus-http-core: Quarkus HTTP cookie smuggling7.4CNA v3.10.8%2024-12-12Fix
CVE-2024-12382Google Chrome Translate use-after-free8.8v3.14.9%2024-12-12Fix
CVE-2024-12381Google Chrome V8 type confusion8.8v3.14.9%2024-12-12Exploit codeFix
CVE-2024-12341Custom Skins Contact Form 7 WordPress plugin unauthorized access4.3CNA v3.10.4%2024-12-12
CVE-2024-12338Website Toolbox Community WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12Fix
CVE-2024-12333WoodMart WordPress theme unauthenticated arbitrary shortcode execution6.5CNA v3.10.4%2024-12-12Fix
CVE-2024-12329Essential Real Estate WordPress plugin missing authorization authenticated information exposure4.3CNA v3.10.4%2024-12-12Fix
CVE-2024-12312Print Science Designer WordPress plugin unauthenticated PHP object injection8.1CNA v3.11.1%2024-12-12Fix
CVE-2024-12292Insertion of sensitive information into log file in GitLab4.0CNA v3.10.2%2024-12-12Fix
CVE-2024-12289HashiCorp Boundary controller initialization denial of service5.9CNA v3.10.4%2024-12-12Fix
CVE-2024-12271360 Javascript Viewer WordPress plugin authenticated (Administrator+) stored cross-site scripting4.4CNA v3.10.4%2024-12-12Fix
CVE-2024-12265Web3 Crypto Payments by DePay for WooCommerce WordPress plugin unauthorized access5.3CNA v3.10.4%2024-12-12Fix
CVE-2024-12263Child Theme Creator by Orbisius WordPress plugin unauthorized access4.3CNA v3.10.3%2024-12-12Fix
CVE-2024-12260Ultimate Endpoints With Rest Api WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12
CVE-2024-12258WP Service Payment Form With Authorize.net WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12
CVE-2024-12255Accept Stripe Payments Using Contact Form 7 WordPress plugin unauthenticated information exposure5.3CNA v3.10.5%2024-12-12Fix
CVE-2024-12201Hash Form WordPress plugin missing authorization to authenticated (Contributor+) form Style creation4.3CNA v3.10.4%2024-12-12Fix
CVE-2024-12172WP Courses LMS WordPress plugin unauthorized access7.5CNA v3.10.8%2024-12-12Exploit codeFix
CVE-2024-12162Video and Photo Gallery for Ultimate Member WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12Fix
CVE-2024-12160Seraphinite Bulk Discounts for WooCommerce WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12Fix
CVE-2024-12156AI Content Writer WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12Fix
CVE-2024-12072Analytics Cat Google Analytics Made Easy WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-12Fix
CVE-2024-12059ElementInvader Addons for Elementor WordPress plugin missing authorization to arbitrary options read4.3CNA v3.10.3%2024-12-12Fix
CVE-2024-12040Product Carousel Slider and Grid Ultimate for WooCommerce WordPress plugin local file inclusion8.8CNA v3.10.8%2024-12-12Fix
CVE-2024-12018Snippet Shortcodes WordPress plugin authenticated (Subscriber+) shortcode deletion4.3CNA v3.10.4%2024-12-12Fix
CVE-2024-11950XnSoft XnView Classic RWZ File Parsing integer underflow remote code execution8.8v3.10.5%2024-12-12
CVE-2024-11949GFI Archiver Store service deserialization of untrusted data remote code execution8.8v3.10.8%2024-12-12
CVE-2024-11948GFI Archiver Telerik Web UI remote code execution9.8v3.11.4%2024-12-12
CVE-2024-11947GFI Archiver Core service deserialization of untrusted data remote code execution8.8v3.10.8%2024-12-12
CVE-2024-11914Gutenberg Blocks and Page Layouts Attire Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-12-12Fix
CVE-2024-11901PowerBI Embed Reports WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.5%2024-12-12Fix
CVE-2024-11891Perfect Font Awesome Integration WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-11882FAQ And Answers WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11875The Add infos to the events calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fuss' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for auth6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-11872Epic Games Launcher incorrect default permissions local privilege escalation7.8CNA v3.00.2%2024-12-12Fix
CVE-2024-11871Social Media Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-11804Planaday API WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-12Fix
CVE-2024-11785Integrate Firebase WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11781Smart Agenda Prise de rendez-vous en ligne WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11766WordPress Book Plugin for Displaying Books in Grid WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-11765WordPress Portfolio Plugin WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-11760Currency Converter Widget ⚡ PRO WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11757WP GeoNames WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11750ONLYOFFICE DocSpace WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11727NotificationX WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2024-12-12Fix
CVE-2024-11724Cookie Consent for WP WordPress plugin unauthorized access4.3CNA v3.10.3%2024-12-12Fix
CVE-2024-11723kvCORE IDX WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-12
CVE-2024-11709AI Post Generator AutoWriter WordPress plugin missing authorization authenticated Post/Page deletion4.3CNA v3.10.4%2024-12-12
CVE-2024-11689HQ Rental Software WordPress plugin cross-site request forgery to arbitrary options update8.8CNA v3.10.4%2024-12-12
CVE-2024-11683Newsletter Subscriptions WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12
CVE-2024-11459Country Blocker WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12
CVE-2024-11443de:branding WordPress plugin authenticated (Subscriber+) arbitrary options update8.8CNA v3.10.5%2024-12-12
CVE-2024-11442Horizontal scroll image slideshow WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-12-12
CVE-2024-11433Surbma SalesAutopilot Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-12
CVE-2024-11430SQL Chart Builder WordPress plugin authenticated (Contributor+) SQL injection6.5CNA v3.10.5%2024-12-12Fix
CVE-2024-11427Catch Popup WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.5%2024-12-12
CVE-2024-11419Password for WP WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2024-12-12Fix
CVE-2024-11417dejure.org Vernetzungsfunktion WordPress plugin cross-site request forgery6.1CNA v3.10.2%2024-12-12Fix
CVE-2024-11413HostFact bestelformulier integratie WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2024-12-12Fix
CVE-2024-11410Top and footer bars for announcements WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-11384Arena.IM Live Blogging for real-time events WordPress plugin stored cross-site scripting5.4v3.10.3%2024-12-12Fix
CVE-2024-11359Library Bookshelves WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2024-12-12Fix
CVE-2024-11279Schema App Structured Data WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-12-12Fix
CVE-2024-11274URL redirection to untrusted site (open redirect) in GitLab8.7CNA v3.10.5%2024-12-12Fix
CVE-2024-11181Greenshift animation and page builder blocks WordPress plugin post disclosure4.3CNA v3.10.5%2024-12-12Fix
CVE-2024-11052Ninja Forms WordPress plugin stored cross-site scripting6.1NVD v3.10.3%2024-12-12Fix
CVE-2024-11015Sign In With Google WordPress plugin authentication bypass in authenticate_user9.8CNA v3.10.8%2024-12-12
CVE-2024-10910G5Theme Grid Plus code injection7.3CNA v3.10.6%2024-12-12
CVE-2024-10784Unlimited Elements For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2024-12-12Fix
CVE-2024-10637Kadence Blocks WordPress plugin Admin+ stored XSS5.4CISA ADP v3.10.3%2024-12-12Fix
CVE-2024-10590Opt-In Downloads WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.8%2024-12-12
CVE-2024-10583Popup Maker WordPress plugin stored cross-site scripting5.4CNA v3.10.3%2024-12-12Fix
CVE-2024-10568Ajax Search Lite WordPress plugin Admin+ stored XSS4.7CISA ADP v3.10.4%2024-12-12Fix
CVE-2024-10518ProfilePress WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-12-12Fix
CVE-2024-10517ProfilePress WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-12-12Fix
CVE-2024-10499Meow Apps AI Engine REST API endpoint SQL injection7.2CISA ADP v3.10.6%2024-12-12Fix
CVE-2024-10182Cognito Forms WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-10124themehunk Vayu Blocks tp_install function missing authorization9.8CNA v3.132.7%2024-12-12Exploit codeFix
CVE-2024-10111OAuth Single Sign On SSO (OAuth Client) WordPress plugin authentication bypass8.1CNA v3.10.8%2024-12-12Fix
CVE-2024-10043Incorrect authorization in GitLab3.1CNA v3.10.5%2024-12-12Fix
CVE-2024-10010LearnPress WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.5%2024-12-12Fix
CVE-2024-9881LearnPress WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-12-12Fix
CVE-2024-9641LuckyWP Table of Contents WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2024-12-12Fix
CVE-2024-9428Popup Builder WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2024-12-12Fix
CVE-2024-9387URL redirection to untrusted site (open redirect) in GitLab6.4CNA v3.10.4%2024-12-12Fix
CVE-2024-9367Allocation of resources without limits or throttling in GitLab4.3CNA v3.10.5%2024-12-12Fix
CVE-2024-8647Improper limitation of a pathname to a restricted directory (path traversal) in GitLab5.4CNA v3.10.4%2024-12-12Fix
CVE-2024-8233Inefficient algorithmic complexity in GitLab7.5CNA v3.10.8%2024-12-12Fix
CVE-2024-8179Improper neutralization of input during web page generation (cross-site scripting) in GitLab5.4CNA v3.10.3%2024-12-12Fix
CVE-2024-54269Notibar WordPress plugin broken access control4.3CNA v3.10.3%2024-12-11Fix
CVE-2024-53677Apache Struts file upload logic is flawed9.5CNA v4.070.1%2024-12-11Emerging ThreatsExploit codeFix
CVE-2024-53292Dell VxRail HCI plaintext password storage7.2CNA v3.10.1%2024-12-11Fix
CVE-2024-53290Dell Wyse Proprietary OS (Modern ThinOS) command injection8.4CNA v3.10.8%2024-12-11Fix
CVE-2024-53289Dell Wyse Proprietary OS (Modern ThinOS) time-of-check time-of-use race condition7.8CNA v3.10.1%2024-12-11Fix
CVE-2024-52537Dell Client Platform BIOS symlink following6.3CNA v3.10.2%2024-12-11Fix
CVE-2024-51460IBM InfoSphere Information Server information disclosure4.3CNA v3.10.3%2024-12-11Fix
CVE-2024-50585Numerix License Server Administration System reflected cross-site scripting4.7CISA ADP v3.10.5%2024-12-11
CVE-2024-48912GLPI vulnerable to authenticated insecure account deletion7.2CNA v4.00.4%2024-12-11Fix
CVE-2024-47761GLPI vulnerable to account takeover via the password reset feature7.5CNA v4.00.5%2024-12-11Fix
CVE-2024-47760GLPI vulnerable to account takeover via API7.5CNA v4.00.5%2024-12-11Fix
CVE-2024-47758GLPI vulnerable to account takeover without privilege escalation through the API7.6CNA v4.00.5%2024-12-11Fix
CVE-2024-35117IBM OpenPages with Watson information disclosure4.4CNA v3.10.2%2024-12-11Fix
CVE-2024-28141Image Access Scan2Net cross-site request forgery6.3CISA ADP v3.10.4%2024-12-11Fix
CVE-2024-28140Image Access Scan2Net Violation of Least Privilege Principle6.1CISA ADP v3.10.3%2024-12-11Fix
CVE-2024-28139Image Access Scan2Net privilege escalation through sudo misconfiguration8.8CISA ADP v3.10.7%2024-12-11
CVE-2024-12363Insufficient permissions in the TeamViewer Patch and Asset Management component7.1CNA v3.10.1%2024-12-11Fix
CVE-2024-12325Waymark WordPress plugin reflected cross-site scripting via content6.1CNA v3.10.4%2024-12-11Fix
CVE-2024-12294Last Viewed Posts by WPBeginner WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.4%2024-12-11Fix
CVE-2024-12283WP Pipes WordPress plugin reflected cross-site scripting via x1 parameter6.1CNA v3.10.4%2024-12-11Fix
CVE-2024-12004WPC Order Notes for WooCommerce WordPress plugin cross-site request forgery6.1CNA v3.10.2%2024-12-11Fix
CVE-2024-11840RapidLoad WordPress plugin unauthorized access7.1CNA v3.10.4%2024-12-11Fix
CVE-2024-11737Schneider Electric Modicon Controllers M241/M251 improper input validation9.3CNA v4.00.6%2024-12-11Fix
CVE-2024-11598Ivanti Application Control incorrect default permissions7.8CNA v3.10.2%2024-12-11Fix
CVE-2024-11597Ivanti Performance Manager incorrect default permissions7.8CNA v3.10.2%2024-12-11Fix
CVE-2024-11401Rapid7 Insight Platform privilege escalation5.3CNA v4.00.3%2024-12-11
CVE-2024-11351tickera Restrict WordPress core search feature information disclosure5.3CNA v3.10.4%2024-12-11Fix
CVE-2024-11053curl netrc and redirect credential leak3.4CISA ADP v3.12.0%2024-12-11Fix
CVE-2024-11008Members WordPress plugin information disclosure5.3CNA v3.10.4%2024-12-11Fix
CVE-2024-10511Schneider Electric PowerChute™ Serial Shutdown improper authentication6.3CNA v4.01.0%2024-12-11Exploit codeFix
CVE-2024-10251Ivanti Security Controls incorrect default permissions7.8CNA v3.10.2%2024-12-11Fix
CVE-2024-9845Ivanti Automation incorrect default permissions7.8CNA v3.10.2%2024-12-11Fix
CVE-2024-8496Ivanti Workspace Control incorrect default permissions7.8CNA v3.10.2%2024-12-11Fix
CVE-2024-55655sigstore-python has insufficient validation of integration timestamp during verification2.7CNA v4.00.3%2024-12-10Fix
CVE-2024-55653Pwndoc's UnhandledPromiseRejection on audits causes denial of service (DoS)6.5CNA v3.10.6%2024-12-10
CVE-2024-55638Drupal core Moderately critical Gadget chain SA-CORE-2024-0089.8CISA ADP v3.11.0%2024-12-10Fix
CVE-2024-55637Drupal core Moderately critical Gadget chain SA-CORE-2024-0079.8CISA ADP v3.10.8%2024-12-10Fix
CVE-2024-55636Drupal core Less critical Gadget chain SA-CORE-2024-0069.8CISA ADP v3.10.9%2024-12-10Fix
CVE-2024-55635Drupal core Critical cross-site scripting SA-CORE-2024-0056.1CISA ADP v3.10.3%2024-12-10Fix
CVE-2024-55634Drupal core Moderately critical Access bypass SA-CORE-2024-0048.1CISA ADP v3.10.4%2024-12-10Fix
CVE-2024-55602pwndoc PenDoc vulnerable to arbitrary file read on updating and downloading templates7.6CNA v3.10.7%2024-12-10
CVE-2024-55586Nette Database where method SQL injection9.8CISA ADP v3.10.6%2024-12-10
CVE-2024-55550Mitel MiCollab path traversal2.7NVD v3.138.2%2024-12-10KEVNucleiEmerging ThreatsKCVFix
CVE-2024-55548ORing IAP-420 denial of service7.5NVD v3.10.5%2024-12-10
CVE-2024-55547ORing IAP-420 remote command execution via SNMP9.8NVD v3.117.4%2024-12-10
CVE-2024-55546ORing IAP-420 stored cross-site scripting5.4NVD v3.10.3%2024-12-10
CVE-2024-55545ORing IAP-420 reflected cross-site scripting6.1NVD v3.10.3%2024-12-10
CVE-2024-55544ORing IAP-420 authenticated command injection8.8NVD v3.112.0%2024-12-10
CVE-2024-55500Avenwu Whistle cross-site request forgery (CSRF)8.8CISA ADP v3.10.4%2024-12-10
CVE-2024-54751COMFAST CF-WR630AX /etc/shadow root account hard-coded credentials9.8CISA ADP v3.10.4%2024-12-10
CVE-2024-54198SAP NetWeaver Application Server ABAP Remote Function Call information disclosure8.5CNA v3.10.6%2024-12-10Fix
CVE-2024-54197Server-side request forgery in SAP NetWeaver Administrator (System Overview)7.2CNA v3.10.3%2024-12-10Fix
CVE-2024-54152peerigon angular-expressions angular Expressions remote code execution when using locals9.3CNA v4.02.2%2024-12-10Exploit codeFix
CVE-2024-54133rails possible content security policy bypass in Action Dispatch2.3CNA v4.01.0%2024-12-10Fix
CVE-2024-54095Siemens Solid Edge SE2024 integer underflow7.3CNA v4.00.2%2024-12-10Fix
CVE-2024-54094Siemens Solid Edge SE2024 heap-based buffer overflow7.3CNA v4.00.2%2024-12-10Fix
CVE-2024-54093Siemens Solid Edge SE2024 heap-based buffer overflow7.3CNA v4.00.2%2024-12-10Fix
CVE-2024-54091Siemens Solid Edge SE2024 out-of-bounds write7.3CNA v4.00.2%2024-12-10Fix
CVE-2024-54051Adobe Connect URL redirection to untrusted site (open redirect)6.1CNA v3.10.5%2024-12-10Fix
CVE-2024-54050Adobe Connect URL redirection to untrusted site (open redirect)6.1CNA v3.10.5%2024-12-10Fix
CVE-2024-54049Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54048Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54047Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54046Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54045Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54044Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54043Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.3%2024-12-10Fix
CVE-2024-54042Adobe Connect cross-site scripting (reflected XSS)6.1CNA v3.10.5%2024-12-10Fix
CVE-2024-54041Adobe Connect cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-12-10Fix
CVE-2024-54040Adobe Connect cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-12-10Fix
CVE-2024-54039Adobe Connect cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-12-10Fix
CVE-2024-54038Adobe Connect improper access control4.3CNA v3.10.5%2024-12-10Fix
CVE-2024-54037Adobe Connect cross-site scripting (DOM-based XSS)8.1CNA v3.10.9%2024-12-10Fix
CVE-2024-54036Adobe Connect cross-site scripting (stored XSS)9.3CNA v3.10.7%2024-12-10Fix
CVE-2024-54034Adobe Connect cross-site scripting (reflected XSS)9.3CNA v3.10.7%2024-12-10Fix
CVE-2024-54032Adobe Connect cross-site scripting (stored XSS)9.3CNA v3.10.8%2024-12-10Fix
CVE-2024-54008Authenticated remote code execution (RCE) in HPE Aruba Networking AirWave Management Platform7.2CNA v3.10.8%2024-12-10
CVE-2024-54005Siemens COMOS XML external entity injection5.9CNA v4.00.2%2024-12-10Fix
CVE-2024-53960Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2024-12-10Fix
CVE-2024-53959Adobe FrameMaker stack-based buffer overflow7.8CNA v3.10.5%2024-12-10Fix
CVE-2024-53958Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.4%2024-12-10Fix
CVE-2024-53957Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.5%2024-12-10Fix
CVE-2024-53956Adobe Premiere Pro heap-based buffer overflow7.8CNA v3.10.5%2024-12-10Fix
CVE-2024-53955Adobe Bridge integer underflow (wrap or wraparound)7.8CNA v3.10.5%2024-12-10Fix
CVE-2024-53954Adobe Animate integer underflow (wrap or wraparound)7.8CNA v3.10.4%2024-12-10Fix
CVE-2024-53953Adobe Animate use-after-free7.8CNA v3.10.5%2024-12-10Fix
CVE-2024-53952Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.3%2024-12-10Fix
CVE-2024-53951Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2024-12-10Fix
CVE-2024-53919Barco ClickShare CX-30/20 An injection7.6CNA v3.10.4%2024-12-10
CVE-2024-53866pnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasion5.8CNA v4.01.0%2024-12-10Fix
CVE-2024-53832Siemens CPCI85 Central Processing/Communication insufficiently protected credentials5.1CNA v4.00.3%2024-12-10Fix
CVE-2024-53552CrushFTP weak password recovery9.8CISA ADP v3.10.8%2024-12-10Fix
CVE-2024-53481PHPGurukul Beauty Parlour Management System profile.php cross-site scripting6.1CISA ADP v3.10.5%2024-12-10
CVE-2024-53480PHPGurukul Beauty Parlour Management System SQL injection9.8CISA ADP v3.10.6%2024-12-10
CVE-2024-53247Remote code execution through deserialization of untrusted data in Splunk Secure Gateway app8.8CNA v3.11.1%2024-12-10Fix
CVE-2024-53246Splunk Enterprise sensitive information disclosure through SPL commands7.5v3.10.3%2024-12-10Fix
CVE-2024-53245Splunk Enterprise and Cloud Platform dashboard role name collision handling information disclosure4.3v3.10.4%2024-12-10Fix
CVE-2024-53244Splunk Enterprise and Cloud Platform saved search risky command safeguards information disclosure5.7v3.10.5%2024-12-10Fix
CVE-2024-53243Information disclosure in Mobile Alert Responses in Splunk Secure Gateway4.3CNA v3.10.3%2024-12-10Fix
CVE-2024-53242Siemens Teamcenter Visualization out-of-bounds read7.3CNA v4.00.2%2024-12-10Fix
CVE-2024-53041Siemens Teamcenter Visualization stack-based buffer overflow7.3CNA v4.00.2%2024-12-10Fix
CVE-2024-53006Adobe Substance3D Modeler null pointer dereference5.5CNA v3.10.4%2024-12-10Fix
CVE-2024-53005Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.4%2024-12-10Fix
CVE-2024-53004Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.5%2024-12-10Fix
CVE-2024-53003Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.4%2024-12-10Fix
CVE-2024-53002Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.4%2024-12-10Fix
CVE-2024-53001Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.4%2024-12-10Fix
CVE-2024-53000Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.4%2024-12-10Fix
CVE-2024-52999Adobe Substance3D Modeler heap-based buffer overflow7.8CNA v3.10.5%2024-12-10Fix