CVE-2024 records published in December 2024
Page three of four: records 2,001 to 3,000 of the 3,010 published in December 2024, newest first. The first page carries the figures for December 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-52997 | Adobe Photoshop Desktop use-after-free | 7.8CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52996 | Adobe Substance3D Sampler heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52995 | Adobe Substance3D Sampler heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52994 | Adobe Substance3D Sampler out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-52993 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52992 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52991 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52990 | Adobe Animate buffer underwrite (buffer underflow) | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52989 | Adobe Animate integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52988 | Adobe Animate out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52987 | Adobe Animate integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52986 | Adobe Animate integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52985 | Adobe Animate integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52984 | Adobe Animate integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52983 | Adobe Animate integer overflow or wraparound | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52982 | Adobe Animate improper input validation | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52865 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52864 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52862 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52861 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52860 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.8% | 2024-12-10 | Fix |
| CVE-2024-52859 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52858 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52857 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52855 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52854 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52853 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52852 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52851 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52850 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52849 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52848 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52847 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52846 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52845 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52844 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52843 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52842 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52841 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52840 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52839 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52838 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52837 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52836 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52835 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52834 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52833 | Adobe Substance3D Modeler null pointer dereference | 5.5CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52832 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52831 | Adobe Experience Manager improper input validation | 3.5CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52830 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52829 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52828 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52827 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52826 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52825 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52824 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52823 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52822 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-52818 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52817 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52816 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-52538 | Dell Avamar SQL injection | 7.6CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-52051 | Siemens SIMATIC S7-PLCSIM V17 improper input validation | 7.0CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-51165 | ketr JEPaaS SQL injection | 7.5CISA ADP v3.1 | 0.6% | 2024-12-10 | |
| CVE-2024-50931 | Silabs Z-wave Software Development Kit improper preservation of permissions | 4.6CISA ADP v3.1 | 0.2% | 2024-12-10 | |
| CVE-2024-50930 | Silabs Z-wave Software Development Kit improper preservation of permissions | 8.8CISA ADP v3.1 | 0.3% | 2024-12-10 | |
| CVE-2024-50929 | Silabs Z-wave Software Development Kit Silicon Labs insecure permissions | 6.2CISA ADP v3.1 | 0.2% | 2024-12-10 | |
| CVE-2024-50928 | Silabs Z-wave Software Development Kit Silicon Labs insecure permissions | 6.5CISA ADP v3.1 | 0.4% | 2024-12-10 | |
| CVE-2024-50924 | Silabs EFR32ZG14P231F256GM32 Silicon Labs insecure permissions | 6.5CISA ADP v3.1 | 0.4% | 2024-12-10 | |
| CVE-2024-50921 | Silabs EFR32ZG14P231F256GM32 Silicon Labs insecure permissions | 6.5CISA ADP v3.1 | 0.4% | 2024-12-10 | |
| CVE-2024-50920 | Silabs EFR32ZG14P231F256GM32 Silicon Labs insecure permissions | 8.8CISA ADP v3.1 | 0.5% | 2024-12-10 | |
| CVE-2024-50699 | TP-Link Tl-wr845n insufficiently protected credentials | 8.0CISA ADP v3.1 | 0.4% | 2024-12-10 | |
| CVE-2024-49849 | Siemens SIMATIC S7-PLCSIM V16 deserialization of untrusted data | 8.4CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-49704 | Siemens COMOS XML external entity injection | 5.7CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-49554 | Adobe Media Encoder null pointer dereference | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49553 | Adobe Media Encoder out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-49552 | Adobe Media Encoder heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-49551 | Adobe Media Encoder out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-49550 | Adobe Connect cross-site scripting (reflected XSS) | 6.1CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-49549 | Adobe InDesign Desktop out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49548 | Adobe InDesign Desktop out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49547 | Adobe InDesign Desktop out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49546 | Adobe InDesign Desktop out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49545 | Adobe InDesign Desktop heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-49544 | Adobe InDesign Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49543 | Adobe InDesign Desktop stack-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-49541 | Adobe Illustrator out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49538 | Adobe Illustrator out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49537 | Adobe After Effects stack-based buffer overflow | 7.8CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-49535 | Adobe Acrobat Reader improper restriction of XML external entity reference (XXE) | 6.3CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-49534 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-49533 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-49532 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-49531 | Adobe Acrobat Reader null pointer dereference | 5.5CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-49530 | Adobe Acrobat Reader use-after-free | 7.8CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-49513 | Adobe Not a product out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-47977 | Dell Avamar SQL injection | 7.1CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-47946 | Image Access Scan2Net OS command execution through arbitrary file upload | 7.2CISA ADP v3.1 | 1.1% | 2024-12-10 | Fix |
| CVE-2024-47585 | Missing authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform | 4.3CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-47582 | XML entity expansion vulnerability in SAP NetWeaver AS JAVA | 5.3CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-47581 | SAP HCM Approve Timesheets application missing authorization | 4.3CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-47580 | SAP NetWeaver AS for JAVA (Adobe Document Services) sensitive information in an accessible file | 6.8CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-47579 | SAP NetWeaver AS for JAVA (Adobe Document Services) sensitive information in an accessible file | 6.8CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-47578 | SAP NetWeaver AS for JAVA (Adobe Document Services) server-side request forgery | 9.1CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-47577 | Information disclosure vulnerability in SAP Commerce Cloud | 2.7CNA v3.1 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-47576 | DLL hijacking vulnerability in SAP Product Lifecycle Costing | 3.3CNA v3.1 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-47484 | Dell Avamar SQL injection | 8.2CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-47117 | IBM Carbon Design System cross-site scripting | 5.4CNA v3.1 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-46657 | Artifex MuPDF buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-46442 | An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack. | 9.8CISA ADP v3.1 | 0.5% | 2024-12-10 | |
| CVE-2024-46341 | TP-Link Tl-wr845n insufficiently protected credentials | 8.0CISA ADP v3.1 | 0.2% | 2024-12-10 | |
| CVE-2024-46340 | TP-Link Tl-wr845n cleartext storage of sensitive information | 9.8CISA ADP v3.1 | 0.3% | 2024-12-10 | |
| CVE-2024-45709 | SolarWinds Web Help Desk Local File Read vulnerability | 5.3CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-45494 | MSA FieldServer Gateway administrative account incorrect default permissions | 9.8CISA ADP v3.1 | 0.5% | 2024-12-10 | |
| CVE-2024-45493 | MSA FieldServer Gateway internal user authentication missing authorization | 9.8CISA ADP v3.1 | 0.5% | 2024-12-10 | |
| CVE-2024-45156 | Adobe Animate null pointer dereference | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-45155 | Adobe Animate access of uninitialized pointer | 7.8CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-43755 | Adobe Experience Manager improper input validation | 3.5CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-43754 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-43752 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43751 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43750 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43749 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43748 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43747 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43746 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43745 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43744 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43743 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43742 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43740 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43739 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43738 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-43737 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43736 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43735 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43734 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43733 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-43732 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 4.6CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-43731 | Adobe Experience Manager improper authorization | 4.3CNA v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-43730 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43729 | Adobe Experience Manager improper authorization | 6.5CNA v3.1 | 1.1% | 2024-12-10 | Fix |
| CVE-2024-43728 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43727 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43726 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43725 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43724 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43723 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43722 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43721 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43720 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-43719 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43718 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.5% | 2024-12-10 | Fix |
| CVE-2024-43717 | Adobe Experience Manager improper access control | 4.3CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43716 | Adobe Experience Manager improper access control | 4.3CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43715 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43714 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43713 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-43712 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-37144 | Dell PowerFlex appliance insecure storage of sensitive information | 8.2CNA v3.1 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-37143 | Dell PowerFlex appliance link following | 10.0CNA v3.1 | 0.8% | 2024-12-10 | Fix |
| CVE-2024-32732 | Information disclosure vulnerability in SAP BusinessObjects Business Intelligence platform | 5.3CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-28138 | Image Access Scan2Net OS command injection | 7.3CISA ADP v3.1 | 0.9% | 2024-12-10 | Fix |
| CVE-2024-21542 | luigi arbitrary file write via Archive Extraction (Zip Slip) | 7.7CNA v4.0 | 1.1% | 2024-12-10 | Exploit codeFix |
| CVE-2024-12393 | Drupal core Moderately critical cross-site scripting SA-CORE-2024-003 | 5.4CISA ADP v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-12323 | turboSMTP WordPress plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-12286 | Mobatime Network Master Clock has a use of default credentials | 9.3CNA v4.0 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-12236 | Google Vertex Gemini API VPC Service Controls vulnerability | 6.8CNA v4.0 | 0.1% | 2024-12-10 | Fix |
| CVE-2024-11973 | Quran multilanguage Text and Audio WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-11945 | Email Reminders WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-11940 | Property Hive Mortgage Calculator WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-11928 | iChart Easy Charts and Graphs WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-11868 | LearnPress WordPress LMS plugin Course Material sensitive information exposure via REST API | 5.3CNA v3.1 | 1.2% | 2024-12-10 | NucleiFix |
| CVE-2024-11773 | Ivanti Cloud Services Application admin web console SQL injection | 9.1CNA v3.1 | 23.5% | 2024-12-10 | Fix |
| CVE-2024-11772 | Ivanti Cloud Services Application admin web console command injection | 9.1CNA v3.1 | 7.7% | 2024-12-10 | Fix |
| CVE-2024-11639 | Ivanti Cloud Services Application admin web console authentication bypass | 10.0CNA v3.1 | 4.9% | 2024-12-10 | Fix |
| CVE-2024-11634 | Ivanti Connect Secure command injection | 9.1CNA v3.1 | 1.8% | 2024-12-10 | Fix |
| CVE-2024-11633 | Ivanti Connect Secure argument injection | 9.1CNA v3.1 | 1.7% | 2024-12-10 | Fix |
| CVE-2024-11205 | WPForms - missing authorization to Authenticated Payment Refund and Subscription Cancellation | 6.5NVD v3.1 | 0.7% | 2024-12-10 | Fix |
| CVE-2024-11107 | System Dashboard WordPress plugin unauthenticated stored XSS | 6.1CISA ADP v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-11106 | Simple Restrict WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-12-10 | Fix |
| CVE-2024-10959 | realmag777 Active Products Tables for WooCommerce code injection | 7.3CNA v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-10708 | System Dashboard WordPress plugin Admin+ path traversal | 4.9CISA ADP v3.1 | 2.1% | 2024-12-10 | NucleiFix |
| CVE-2024-10496 | Out-of-bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW | 8.4CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-10495 | Out-of-bounds read when loading the font table in fontmgr.cpp in NI LabVIEW | 8.4CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-10494 | Out-of-bounds read in HeapObjMapImpl.cpp in NI LabVIEW | 8.4CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-10256 | Ivanti Patch SDK improper permissions | 7.1CNA v3.1 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-9844 | Ivanti Connect Secure client-side enforcement of server-side security | 7.1CNA v3.1 | 1.0% | 2024-12-10 | Fix |
| CVE-2024-9672 | Reflected XSS in PaperCut MF | 6.3CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-8540 | Ivanti Sentry insecure permissions | 8.8CNA v3.1 | 0.3% | 2024-12-10 | Fix |
| CVE-2024-8256 | Incorrect permission assignment in RutOS based routers and TSWOS based managed switches | 5.9CNA v4.0 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-7572 | Ivanti Desktop and Server Management improper permissions | 7.1CNA v3.1 | 0.2% | 2024-12-10 | Fix |
| CVE-2024-5660 | Arm Cortex-A77 resource exposure | 9.8CISA ADP v3.1 | 0.6% | 2024-12-10 | Fix |
| CVE-2024-55601 | Hugo does not escape some attributes in internal templates | 5.3CNA v4.0 | 0.6% | 2024-12-09 | Fix |
| CVE-2024-55582 | Oxide Control Plane datastores cleartext storage of sensitive information | 5.7CNA v3.1 | 0.1% | 2024-12-09 | |
| CVE-2024-55580 | Qlik Sense Enterprise for Windows code injection | 7.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-55579 | Qlik Sense Enterprise for Windows connection objects incorrect authorization | 8.8CNA v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-55578 | zammad sensitive information in log files | 4.3CISA ADP v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-55566 | ColPack temporary file naming improper seeding | 6.6CNA v3.1 | 0.2% | 2024-12-09 | |
| CVE-2024-55565 | Predictable results in nanoid generation when given non-integer values | 4.3CISA ADP v3.1 | 0.7% | 2024-12-09 | Fix |
| CVE-2024-55564 | POSIX::2008 execve environment buffer buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-55563 | Bitcoin Core resource exhaustion | 5.3CISA ADP v3.1 | 0.7% | 2024-12-09 | |
| CVE-2024-54938 | Lopalopa E-learning Management System Kashipara directory listing | 7.5CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54937 | Lopalopa E-learning Management System Kashipara directory listing | 5.3v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54936 | Lopalopa E-learning Management System cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-54935 | Lopalopa E-learning Management System cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-54934 | Lopalopa E-learning Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54933 | Lopalopa E-learning Management System SQL injection | 7.2NVD v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54932 | Lopalopa E-learning Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54931 | Lopalopa E-learning Management System /admin/delete_event.php in kashipara SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54930 | Lopalopa E-learning Management System SQL injection | 7.2NVD v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54929 | Lopalopa E-learning Management System SQL injection | 7.2v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54928 | Lopalopa E-learning Management System SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54927 | Lopalopa E-learning Management System SQL injection | 7.2CISA ADP v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54926 | Lopalopa E-learning Management System SQL injection | 8.8NVD v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54925 | Lopalopa E-learning Management System /remove_sent_message.php in kashipara SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54924 | Lopalopa E-learning Management System /admin/edit_content.php in kashipara SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54923 | Lopalopa E-learning Management System SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54922 | Lopalopa E-learning Management System /admin/edit_user.php of kashipara SQL injection | 7.2NVD v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54921 | Lopalopa E-learning Management System /student_signup.php in kashipara SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54920 | Lopalopa E-learning Management System SQL injection | 9.8v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54919 | Lopalopa E-learning Management System /teacher_avatar.php of kashipara stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-54918 | Lopalopa E-learning Management System unrestricted file upload | 9.8CISA ADP v3.1 | 0.9% | 2024-12-09 | |
| CVE-2024-54260 | News Kit Elementor Addons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-54255 | Login Widget With Shortcode WordPress plugin open redirection | 4.7CNA v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-54254 | Message Filter for Contact Form 7 WordPress plugin broken access control | 6.3CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-54253 | Xpro Addons For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-54251 | Prodigy Commerce WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-54247 | ABCBiz Addons and Templates for Elementor WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-54232 | RRAddons for Elementor WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-54230 | Unlock Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-54228 | Wot Elementor Widgets WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-54227 | Minimum and Maximum Quantity for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-54226 | Country Blocker WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-09 | |
| CVE-2024-54225 | Designer WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2024-12-09 | Fix |
| CVE-2024-54224 | ElementsReady Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-54223 | ARForms WordPress plugin HTML injection | 6.1v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-54220 | FAT Services Booking WordPress plugin Subscriber+ Site-Wide cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-54219 | AIO Contact WordPress plugin unauthenticated Site-Wide cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-54218 | AIO Contact WordPress plugin unauthenticated plugin settings Change vulnerability | 6.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-54217 | ARForms WordPress plugin Subscriber+ plugin settings Change vulnerability | 5.4CNA v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-54215 | Revy WordPress plugin unauthenticated SQL injection | 9.3CNA v3.1 | 0.6% | 2024-12-09 | |
| CVE-2024-54151 | Directus allows unauthenticated access to WebSocket events and operations | 7.5CNA v3.1 | 0.6% | 2024-12-09 | Fix |
| CVE-2024-54149 | Winter CMS Twig template sandbox sandbox bypass | 8.5CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-54147 | Altair GraphQL Client's desktop app does not validate HTTPS certificates | 6.8CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-53949 | Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled | 7.6CNA v4.0 | 0.7% | 2024-12-09 | Fix |
| CVE-2024-53948 | Apache Superset: Error verbosity exposes metadata in analytics databases | 5.3CNA v4.0 | 0.9% | 2024-12-09 | Fix |
| CVE-2024-53947 | Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions | 2.3CNA v4.0 | 0.8% | 2024-12-09 | Fix |
| CVE-2024-53847 | Trix vulnerable to cross-site scripting on copy and paste | 5.1CNA v4.0 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-53822 | Pie Register Premium WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.8% | 2024-12-09 | Fix |
| CVE-2024-53819 | Client Invoicing by Sprout Invoices WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-53818 | PostX WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-53816 | Tutor LMS Elementor Addons WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-53814 | Analytify WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-53798 | FloristPress WordPress plugin nonce leakage to broken access control | 5.4CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-53791 | Lenxel Core WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-53790 | Lenxel Core WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2024-12-09 | |
| CVE-2024-53785 | Chatter WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-53450 | infiniflow ragflow out-of-bounds read | 7.5CISA ADP v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-53441 | Bit flip attack vulnerability in cookie-encrypter | 9.1CISA ADP v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-53285 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-53284 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-53283 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-53282 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-53281 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-53280 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-53279 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-52599 | Tuleap vulnerable to XSS in the Gantt chart of the tracker plugin | 5.4CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-52586 | eLabFTW multifactor authentication authentication bypass | 5.4CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-52480 | Jobify WordPress theme broken access control | 9.8v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-52391 | Pie Register Premium WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-52385 | Team Member Multi Language Supported Team WordPress plugin limited local file inclusion | 4.3CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-50628 | Digi Connectport LTS 16 missing authorization | 8.8CISA ADP v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-50627 | Digi Connectport LTS 16 files accessible to external parties | 8.8CISA ADP v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-50626 | Digi Connectport LTS 16 path traversal | 8.8CISA ADP v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-50625 | Digi Connectport LTS 16 unrestricted file upload | 8.0CISA ADP v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-49603 | Dell PowerScale OneFS information disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-49602 | Dell PowerScale OneFS denial of service | 6.5CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-49600 | Dell Power Manager (DPM) improper access control | 7.8CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-48956 | Serviceware Processes service endpoint remote code execution | 9.8CISA ADP v3.1 | 0.9% | 2024-12-09 | |
| CVE-2024-46901 | Apache Subversion: Mod_dav_svn denial of service via control characters in paths | 3.1CNA v3.1 | 1.9% | 2024-12-09 | Fix |
| CVE-2024-46547 | Romain Bourdon Wampserver PHP Info page information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-46455 | Unstructured XML external entity (XXE) | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | Fix |
| CVE-2024-45761 | Dell OpenManage Server Administrator improper input validation | 5.4CNA v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-45760 | Dell OpenManage Server Administrator missing authorization | 4.3CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-43222 | Sweet Date WordPress theme privilege escalation | 9.8CNA v3.1 | 0.8% | 2024-12-09 | Fix |
| CVE-2024-42426 | Dell PowerScale OneFS resource exhaustion | 4.3CNA v3.1 | 0.5% | 2024-12-09 | Fix |
| CVE-2024-40583 | Pentaminds Curovms insufficiently protected credentials | 9.1CISA ADP v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-40582 | Pentaminds Curovms cleartext storage of sensitive information | 7.5CISA ADP v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-38485 | Dell ECS open redirect | 4.3CNA v3.1 | 0.3% | 2024-12-09 | Fix |
| CVE-2024-12369 | Red Hat JBoss Enterprise Application Platform elytron-oidc-client vulnerability | 4.2CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-12360 | code-projects Online Class and Exam Scheduling System class_update.php SQL injection | 8.8v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-12359 | code-projects Admin Dashboard vendor_management.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-12358 | WeiYe-Jing datax-web add os command injection | 8.8v3.1 | 5.2% | 2024-12-09 | |
| CVE-2024-12357 | SourceCodester Best House Rental Management System index.php file inclusion | 5.3v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-12355 | SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation | 7.8v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-12354 | SourceCodester Phone Contact Manager System User Menu MenuDisplayStart buffer overflow | 7.8v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-12353 | SourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation | 7.8v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-12352 | TOTOLINK EX1800T cstecgi.cgi sub_40662C stack-based overflow | 9.8v3.1 | 0.8% | 2024-12-09 | |
| CVE-2024-12351 | JFinalCMS File Content ContentModel.java findPage SQL injection | 8.8v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-12350 | JFinalCMS Template TemplateController.java update command injection | 8.8v3.1 | 3.7% | 2024-12-09 | |
| CVE-2024-12349 | JFinalCMS save cross-site request forgery | 8.8v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-12348 | Guizhou Xiaoma Technology jpress attachment upload handler cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-09 | |
| CVE-2024-12347 | Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface improper authorization | 6.9CNA v4.0 | 0.6% | 2024-12-09 | |
| CVE-2024-12346 | Talentera byt_cv_manager cross-site scripting | 5.3CNA v4.0 | 0.4% | 2024-12-09 | |
| CVE-2024-12307 | Unifiedtransform student profile editing improper access control | 4.3CNA v3.1 | 0.2% | 2024-12-09 | |
| CVE-2024-12306 | Access Control vulnerabilities allow unauthorized access to User Profiles in Unifiedtransform | 4.3CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-12305 | Unifiedtransform student grades endpoint insecure direct object reference | 4.3CNA v3.1 | 0.3% | 2024-12-09 | |
| CVE-2024-12174 | Tenable Security Center improper certificate validation | 2.7CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-12057 | arcinfo PcVue user credentials recorded in log files | 1.8CNA v4.0 | 0.1% | 2024-12-09 | Fix |
| CVE-2024-11991 | Uninitialized memory access in Motoko incremental garbage collector | 5.6CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-11608 | Autodesk Revit heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-11454 | Untrusted search path vulnerability in Autodesk Revit | 7.8CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-11268 | PDF File Parsing vulnerability in Autodesk Revit | 5.5CNA v3.1 | 0.2% | 2024-12-09 | Fix |
| CVE-2024-9651 | Contact Form Plugin by Fluent Forms WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2024-12-09 | Fix |
| CVE-2024-8259 | Unauthenticated SQLi in Eryaz IT's NatraCar B2B Dealer Management Program | 9.8CNA v3.1 | 0.5% | 2024-12-09 | |
| CVE-2024-55560 | MailCleaner SSH host keys vulnerability | 9.8CISA ADP v3.1 | 0.6% | 2024-12-08 | |
| CVE-2024-12344 | TP-Link VN020 F3v(T) FTP user command memory corruption | 9.8v3.1 | 1.9% | 2024-12-08 | Exploit code |
| CVE-2024-12343 | TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow | 8.8v3.1 | 5.0% | 2024-12-08 | |
| CVE-2024-12342 | TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service | 7.1CNA v4.0 | 9.3% | 2024-12-08 | Exploit code |
| CVE-2024-12209 | WP Umbrella: Update Backup Restore and Monitoring WordPress plugin local file inclusion | 9.8CNA v3.1 | 23.2% | 2024-12-08 | NucleiExploit codeFix |
| CVE-2024-53473 | WeGIA missing authorization | 7.5CISA ADP v3.1 | 0.6% | 2024-12-07 | |
| CVE-2024-53143 | Linux kernel fsnotify subsystem use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-07 | Fix |
| CVE-2024-47115 | IBM AIX command execution | 7.8CNA v3.1 | 0.2% | 2024-12-07 | Fix |
| CVE-2024-47107 | IBM QRadar SIEM cross-site scripting | 6.4CNA v3.1 | 0.2% | 2024-12-07 | Fix |
| CVE-2024-41762 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-37071 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-12270 | Beautiful Taxonomy Filters WordPress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 3.7% | 2024-12-07 | Exploit codeFix |
| CVE-2024-12257 | CardGate Payments for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | Fix |
| CVE-2024-12253 | Simple Ecommerce Shopping Cart Plugin- Sell products WordPress plugin unauthorized access | 5.4CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-12167 | Shortcodes Blocks Creator Ultimate WordPress plugin reflected cross-site scripting via _wpnonce | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-12166 | Shortcodes Blocks Creator Ultimate WordPress plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-12165 | Mollie for Contact Form 7 WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-12128 | Simple Ecommerce Shopping Cart Plugin- Sell products WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-12115 | Poll Maker WordPress plugin cross-site request forgery to Poll Duplication | 4.3CNA v3.1 | 0.2% | 2024-12-07 | Fix |
| CVE-2024-12026 | Message Filter for Contact Form 7 WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-07 | Fix |
| CVE-2024-11943 | 워드프레스 결제 심플페이 우커머스 결제 플러그인 WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-11904 | 코드엠샵 소셜톡 WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-07 | Fix |
| CVE-2024-11501 | Gallery WordPress plugin authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-12-07 | |
| CVE-2024-11464 | Easy Code Snippets WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-11457 | Feedpress Generator External RSS Frontend Customizer WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-11451 | Zooom WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-11436 | Drag and Drop Builder WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | Fix |
| CVE-2024-11380 | Mini Program API WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2024-12-07 | |
| CVE-2024-11374 | TWChat Send or receive messages from users WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-11367 | Smoove connector for Elementor forms WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-11353 | SMS for Lead Capture Forms WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-07 | |
| CVE-2024-11329 | Comfino Payment Gateway WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-11183 | Simple Side Tab WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-11010 | FileOrganizer WordPress plugin authenticated (Administrator+) local JavaScript file inclusion | 7.2CNA v3.1 | 0.9% | 2024-12-07 | Fix |
| CVE-2024-10046 | افزونه پیامک ووکامرس Persian WooCommerce SMS WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-8679 | Library Management System WordPress plugin authenticated (Admin+) SQL injection | 6.8CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-7894 | If Menu WordPress plugin missing authorization to License Key update | 5.3CNA v3.1 | 0.4% | 2024-12-07 | Fix |
| CVE-2024-55268 | PHPGurukul COVID19 Testing Management System cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-06 | |
| CVE-2024-54750 | Ubiquiti U6-LR /etc/shadow root account hard-coded credentials | 9.8CISA ADP v3.1 | 0.4% | 2024-12-06 | |
| CVE-2024-54749 | Ubiquiti U7-Pro /etc/shadow root account hard-coded credentials | 7.5CISA ADP v3.1 | 0.2% | 2024-12-06 | |
| CVE-2024-54747 | WAVLINK WN531P3 incorrect default permissions | 9.8CISA ADP v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-54745 | WAVLINK WN701AE incorrect default permissions | 9.8CISA ADP v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-54216 | ARForms WordPress plugin path traversal | 7.7CNA v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-54214 | Revy WordPress plugin unauthenticated arbitrary file upload | 10.0CNA v3.1 | 0.7% | 2024-12-06 | |
| CVE-2024-54213 | ZionBuilder stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-54212 | Magical Addons For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-54211 | Visualmodo Borderless cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-54210 | Advanced Element Bucket Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-06 | |
| CVE-2024-54209 | Awesome Shortcodes WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-54208 | Block Controller WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-54207 | WordPress Auction plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-54206 | Z-Downloads WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-54205 | Paloma Widget WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-06 | |
| CVE-2024-54143 | Openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injection | 9.3CNA v4.0 | 1.8% | 2024-12-06 | Fix |
| CVE-2024-54141 | phpMyFAQ database connection error message information disclosure | 8.6CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-54138 | XSS vulnerability in NuGetGallery's Markdown Autolinks Processing | 6.9CNA v4.0 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-54137 | liboqs has a correctness error in HQC decapsulation | 7.4CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-54136 | Untrusted deserialization in ClipBucket-v5 Revision 199 and Below | 9.8CNA v3.1 | 0.7% | 2024-12-06 | Fix |
| CVE-2024-54135 | Untrusted deserialization in ClipBucket-v5 to Revision 199 | 9.8CNA v3.1 | 0.8% | 2024-12-06 | Fix |
| CVE-2024-53908 | Django SQL injection in HasKey(lhs, rhs) on Oracle | 9.8CISA ADP v3.1 | 1.4% | 2024-12-06 | Fix |
| CVE-2024-53907 | Django denial of service in Django.utils.html.strip_tags | 7.5CISA ADP v3.1 | 1.4% | 2024-12-06 | Fix |
| CVE-2024-53826 | WPCasa WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-53825 | FileBird Lite WordPress plugin broken access control | 7.2v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-53824 | All Bootstrap Blocks WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-53823 | The Plus Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53821 | Pie Register Premium WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53820 | Captivate Sync WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53817 | Acowebs Product Labels For Woocommerce WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-53815 | Pinpoint Booking System WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-53813 | WP Travel WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53812 | WP GeoNames WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53811 | WDesignKit WordPress plugin arbitrary file upload | 6.6CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53810 | Simple User Registration WordPress plugin broken access control on user deletion | 9.1CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-53809 | Namaste! LMS WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-53808 | NEX-Forms WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-53807 | WP Mailster WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-53806 | Maspik WordPress plugin CSRF to settings Change | 5.4CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-53805 | WP Mailster WordPress plugin broken access control | 9.8v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-53804 | WP Mailster WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-53803 | WP Mailster WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-53802 | Futurio Extra WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53801 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-53799 | FloristPress WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-53797 | Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53796 | Themesflat Addons For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53795 | Church Admin WordPress plugin broken access control | 5.3CNA v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-53794 | Arkhe Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-53691 | QNAP QTS and QuTS hero link following | 8.7CNA v4.0 | 22.9% | 2024-12-06 | Emerging ThreatsExploit codeFix |
| CVE-2024-53142 | Linux kernel initramfs cpio extractor out-of-bounds write | 7.8v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-53141 | Linux kernel netfilter ipset bitmap:ip type vulnerability | 7.8CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-52558 | PLANET Technology Planet WGS-804HPT integer underflow | 6.9CNA v4.0 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-52335 | Siemens syngo.plaza VB30E SQL injection | 9.3CNA v4.0 | 0.7% | 2024-12-06 | |
| CVE-2024-52324 | Ruijie Reyee OS Use of Inherently Dangerous function | 9.8v3.1 | 0.7% | 2024-12-06 | Fix |
| CVE-2024-52320 | PLANET Technology Planet WGS-804HPT command injection | 9.3CNA v4.0 | 2.3% | 2024-12-06 | Fix |
| CVE-2024-51815 | s2Member WordPress plugin remote code execution (RCE) | 9.0CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-51727 | Ruijie Reyee OS Premature Release of Resource during Expected Lifetime | 7.5v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-51615 | WordPress Auction plugin SQL injection | 9.3CNA v3.1 | 0.5% | 2024-12-06 | |
| CVE-2024-50677 | oroinc Oroplatform cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2024-12-06 | Exploit code |
| CVE-2024-50404 | QNAP Qsync Central link following | 6.8CNA v4.0 | 1.4% | 2024-12-06 | Exploit codeFix |
| CVE-2024-50403 | QNAP QTS and QuTS hero format string | 2.1CNA v4.0 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-50402 | QNAP QTS and QuTS hero format string | 2.1CNA v4.0 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-50393 | QNAP QTS and QuTS hero command injection | 8.7CNA v4.0 | 1.3% | 2024-12-06 | Fix |
| CVE-2024-50389 | QNAP QuRouter SQL injection | 9.5CNA v4.0 | 0.8% | 2024-12-06 | Fix |
| CVE-2024-50388 | QNAP HBS 3 Hybrid Backup Sync OS command injection | 9.5CNA v4.0 | 2.3% | 2024-12-06 | Fix |
| CVE-2024-50387 | QNAP SMB Service SQL injection | 10.0CNA v4.0 | 10.0% | 2024-12-06 | Fix |
| CVE-2024-49041 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.0% | 2024-12-06 | Fix |
| CVE-2024-48874 | Ruijie Reyee OS server-side request forgery | 9.8v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-48871 | PLANET Technology Planet WGS-804HPT stack-based buffer overflow | 9.3CNA v4.0 | 1.4% | 2024-12-06 | Fix |
| CVE-2024-48868 | QNAP QTS and QuTS hero CRLF injection | 8.7CNA v4.0 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-48867 | QNAP QTS and QuTS hero CRLF injection | 5.3CNA v4.0 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-48866 | An improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to run the system into unexpected state. We have already fixed the vulnerability in the following versio | 2.3CNA v4.0 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-48865 | QNAP QTS and QuTS hero improper certificate validation | 7.3CNA v4.0 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-48863 | QNAP License Center command injection | 7.7CNA v4.0 | 1.1% | 2024-12-06 | Fix |
| CVE-2024-48859 | QNAP QTS and QuTS hero improper authentication | 5.3CNA v4.0 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-48703 | Anujk305 Medical Card Generation System cross-site scripting | 4.8v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-47791 | Ruijie Reyee OS improper neutralization of Wildcards or Matching Symbols | 5.3NVD v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-47547 | Ruijie Reyee OS weak password recovery mechanism for forgotten password | 9.8v3.1 | 0.7% | 2024-12-06 | Fix |
| CVE-2024-47146 | Ruijie Reyee OS resource leak | 6.5NVD v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-47043 | Ruijie Reyee OS insecure storage of sensitive information | 5.3NVD v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-46874 | Ruijie Reyee OS improper handling of insufficient permissions or privileges | 9.9v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-45722 | Ruijie Reyee OS use of weak credentials | 7.5v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-44856 | Open Robotics Robot Operating System null pointer dereference | 7.5v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-44855 | Open Robotics Robot Operating System null pointer dereference | 7.5v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-44854 | Open Robotics Robot Operating System null pointer dereference | 7.5v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-44853 | Open Robotics Robot Operating System null pointer dereference | 7.5v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-44852 | Open Robotics Robot Operating System release of an invalid pointer | 9.8v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-42494 | Ruijie Reyee OS exposure of private personal information to an unauthorized actor | 7.5v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-42196 | HCL Launch is susceptible to insertion of sensitive information into log file | 6.2CNA v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-41650 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.5% | 2024-12-06 | |
| CVE-2024-41649 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.7% | 2024-12-06 | |
| CVE-2024-41648 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.5% | 2024-12-06 | |
| CVE-2024-41647 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.7% | 2024-12-06 | |
| CVE-2024-41646 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.7% | 2024-12-06 | |
| CVE-2024-41645 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.7% | 2024-12-06 | |
| CVE-2024-41644 | Open Robotics Robot Operating System insecure permissions | 9.8v3.1 | 0.7% | 2024-12-06 | |
| CVE-2024-38927 | Open Robotics Robot Operating System use-after-free | 9.8v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-38926 | Open Robotics Robot Operating System use-after-free | 9.8v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-38925 | Open Robotics Robot Operating System use-after-free | 9.8v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-38924 | Open Robotics Robot Operating System use-after-free | 9.8v3.1 | 0.5% | 2024-12-06 | |
| CVE-2024-38923 | Open Robotics Robot Operating System use-after-free | 9.8v3.1 | 0.5% | 2024-12-06 | |
| CVE-2024-38922 | Open Robotics Robot Operating System buffer overflow | 9.8v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-38921 | Open Robotics Robot Operating System use-after-free | 9.8v3.1 | 0.6% | 2024-12-06 | |
| CVE-2024-30129 | HCL Nomad server on Domino is affected by a host header injection | 5.3CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-21571 | Snyk Code Agent all versions remote code execution | 8.1CNA v3.1 | 0.2% | 2024-12-06 | |
| CVE-2024-12326 | Improper neutralization of input during web page generation (cross-site scripting) in Jirafeau | 6.1CNA v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-12254 | Python CPython unbounded memory buffering in SelectorSocketTransport.writelines | 8.7CNA v4.0 | 1.9% | 2024-12-06 | Fix |
| CVE-2024-12155 | SV100 Companion WordPress plugin missing authorization to Unuathenticated arbitrary options update | 9.8CNA v3.1 | 1.2% | 2024-12-06 | |
| CVE-2024-12110 | Gold Addons for Elementor WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-12060 | WP Media Optimizer (.webp) WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-06 | |
| CVE-2024-12028 | Friends WordPress plugin missing authorization | 5.3CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-12027 | Message Filter for Contact Form 7 WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-12003 | WP System WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2024-12-06 | |
| CVE-2024-11823 | Folder Gallery WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-11738 | Rustls: Rustls network-reachable panic in `acceptor::accept` | 5.3CNA v3.1 | 0.7% | 2024-12-06 | Fix |
| CVE-2024-11730 | KiviCare Clinic and Patient Management System WordPress plugin SQL injection | 6.5v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-11729 | KiviCare Clinic and Patient Management System (EHR) WordPress plugin SQL injection | 6.5v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-11728 | KiviCare Clinic and Patient Management System (EHR) WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 13.5% | 2024-12-06 | NucleiExploit codeFix |
| CVE-2024-11687 | Next-Cart Store to WooCommerce Migration WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-11585 | nsp-code WP Hide and Security Enhancer file-process.php path traversal | 7.5CNA v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-11460 | Verowa Connect WordPress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-11450 | ONLYOFFICE Docs WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-11444 | CLUEVO LMS, E-Learning Platform WordPress plugin cross-site request forgery to Module deletion | 4.3CNA v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-11379 | Broadcast WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-11368 | Splash Sync WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-11352 | TwentyTwenty WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-11339 | Smart PopUp Blaster WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-11336 | Clickbank WordPress Plugin (Storefront) cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2024-12-06 | |
| CVE-2024-11323 | AI Quiz Quiz Maker WordPress plugin missing authorization authenticated arbitrary options update | 8.8CNA v3.1 | 0.4% | 2024-12-06 | |
| CVE-2024-11321 | Reflected XSS in Hi e-learning's Learning Management System (LMS) | 5.4CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-11292 | WP Private Content Plus WordPress plugin information disclosure | 5.3CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-11289 | Soledad WordPress theme unauthenticated limited local file inclusion | 8.1CNA v3.1 | 0.7% | 2024-12-06 | Fix |
| CVE-2024-11276 | edgarrojas PDF Builder for WooCommerce page parameter reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-11220 | Open Automation Software Incorrect Execution-Assigned Permissions | 7.8v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-11204 | ForumWP Forum and Discussion Board WordPress plugin reflected cross-site scripting via URL parameter | 6.1CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-11201 | saadiqbal Points Management System For Gamification stored cross-site scripting | 6.4CNA v3.1 | 0.9% | 2024-12-06 | Exploit codeFix |
| CVE-2024-11178 | Login With OTP WordPress plugin authentication bypass via Weak OTP | 8.1CNA v3.1 | 0.7% | 2024-12-06 | Fix |
| CVE-2024-11149 | OpenBSD vmm GDTR limits | 5.5NVD v3.1 | 0.1% | 2024-12-06 | Fix |
| CVE-2024-11022 | SICK InspectorP61x and InspectorP62x authentication challenge response vulnerability | 5.6CNA v3.1 | 0.4% | 2024-12-06 | |
| CVE-2024-10909 | Pojo Forms WordPress plugin arbitrary shortcode execution via form_preview_shortcode | 6.3CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-10879 | ForumWP Forum and Discussion Board WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-10849 | NewsMash WordPress theme authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-10836 | Flixita WordPress theme reflected cross-site scripting via id parameter | 6.1CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-10776 | SICK InspectorP61x and SICK InspectorP62x: Missing authentication | 8.2CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-10774 | SICK InspectorP61x and SICK InspectorP62x have unauthenticated CROWN APIs | 7.3CNA v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-10773 | SICK InspectorP61x, InspectorP62x and TiM3xx hidden user accounts hard-coded credentials | 9.0CNA v3.1 | 0.6% | 2024-12-06 | Fix |
| CVE-2024-10772 | SICK InspectorP61x and InspectorP62x firmware update vulnerability | 8.8CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-10771 | SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code execution | 8.8CNA v3.1 | 1.1% | 2024-12-06 | Fix |
| CVE-2024-10692 | PowerPack Elementor Addons (Free Widgets, Extensions and Templates) WordPress plugin post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-10689 | XLTab Accordions and Tabs for Elementor Page Builder WordPress plugin post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-10681 | Repute Infosystems ARMember code injection | 6.3CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-10578 | Pubnews WordPress theme authenticated (Subscriber+) arbitrary plugin installation | 8.8CNA v3.1 | 1.4% | 2024-12-06 | Exploit codeFix |
| CVE-2024-10551 | Sticky Social Icons for WordPress Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-10516 | Swift Performance Lite WordPress plugin unauthenticated local PHP file inclusion via ajaxify | 8.1CNA v3.1 | 6.4% | 2024-12-06 | NucleiExploit codeFix |
| CVE-2024-10480 | 3DPrint Lite WordPress plugin settings update via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-10320 | Cookielay WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-06 | |
| CVE-2024-10247 | YouTube Gallery and Vimeo Gallery WordPress plugin authenticated (Administrator+) SQL injection | 4.9NVD v3.1 | 0.5% | 2024-12-06 | Fix |
| CVE-2024-9872 | Online Booking and Scheduling Calendar for WordPress by vcita plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-9866 | Event Tickets with Ticket Scanner WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-9769 | Video Gallery WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-9706 | Ultimate Coming Soon and Maintenance WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-9705 | Ultimate Coming Soon and Maintenance WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-7875 | XSS in Tungsten Automation TotalAgility | 5.3CNA v4.0 | 0.5% | 2024-12-06 | |
| CVE-2024-7874 | XSS in Tungsten Automation TotalAgility | 5.3CNA v4.0 | 0.5% | 2024-12-06 | |
| CVE-2024-6219 | Lxd has a restricted TLS certificate privilege escalation when in PKI mode | 3.8CNA v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-6156 | Lxd CA certificate sign check bypass | 3.8CNA v3.1 | 0.2% | 2024-12-06 | Fix |
| CVE-2024-4633 | Slider and Carousel slider by Depicter WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-06 | Fix |
| CVE-2024-0139 | NVIDIA Base Command Manager insecure temporary file | 4.4CNA v3.1 | 0.1% | 2024-12-06 | Fix |
| CVE-2024-0130 | NVIDIA UFM Enterprise GA improper authentication | 8.8CNA v3.1 | 0.3% | 2024-12-06 | Fix |
| CVE-2024-54679 | CyberPanel missing authorization | 6.5v3.1 | 0.9% | 2024-12-05 | Exploit code |
| CVE-2024-54221 | FAT Services Booking WordPress plugin unauthenticated SQL injection | 9.3CNA v3.1 | 0.4% | 2024-12-05 | |
| CVE-2024-54140 | sigstore-java bundle checkpoint verification vulnerability | 2.1CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-54130 | Segmentation Fault in `forwardBundle` function of ION-DTN BPv7 when Destination EID is `dtn:none` | 9.2CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-54129 | Improper initialization of `imc` Scheme leading to `SIGABRT` in ION-DTN BPv7 | 9.2CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-54128 | Directus has an HTML injection in Comment | 5.7CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-54127 | Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50 | 4.3CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-54126 | Insufficient Integrity Verification vulnerability in TP-Link Archer C50 | 8.5CNA v4.0 | 0.1% | 2024-12-05 | Fix |
| CVE-2024-54014 | SKYLARK HOLDINGS 'Skylark' App handler for custom URL scheme issue improper authorization | 3.6CNA v3.0 | 0.2% | 2024-12-05 | |
| CVE-2024-54001 | Kanboard allows a persistent HTML injection site scripting in settings page date format | 5.5CNA v3.1 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-53857 | rPGP potential resource exhaustion when handling Untrusted messages | 7.5CNA v3.1 | 0.5% | 2024-12-05 | Fix |
| CVE-2024-53856 | rPGP Panics on Malformed Untrusted Input | 7.5CNA v3.1 | 0.5% | 2024-12-05 | Fix |
| CVE-2024-53846 | Erlang OTP SSL fails to validate incorrect extened key usage | 5.5CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-53703 | SonicWall SMA100 stack-based buffer overflow | 8.1CISA ADP v3.1 | 12.6% | 2024-12-05 | Exploit codeFix |
| CVE-2024-53702 | SonicWall SMA100 weak random number generator | 5.3CISA ADP v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-53589 | GNU objdump BFD tekhex parser buffer overflow | 8.4CISA ADP v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-53523 | JSFinder find_by_file function path traversal | 7.5CISA ADP v3.1 | 0.8% | 2024-12-05 | |
| CVE-2024-53490 | Favorites-web SecurityFilter path traversal | 7.5CISA ADP v3.1 | 0.8% | 2024-12-05 | |
| CVE-2024-53472 | WeGIA cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-53471 | WeGIA component /configuracao/meio_pagamento.php stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-12-05 | |
| CVE-2024-53470 | WeGIA component /configuracao/gateway_pagamento.php stored cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-12-05 | |
| CVE-2024-53457 | LibreNMS stored cross-site scripting (XSS) vulnerability in the Device settings section | 5.4CISA ADP v3.1 | 46.4% | 2024-12-05 | Fix |
| CVE-2024-53442 | whapa HTML reports component command injection | 9.8CISA ADP v3.1 | 1.4% | 2024-12-05 | |
| CVE-2024-52798 | path-to-regexp Unpatched `path-to-regexp` ReDoS in.x | 7.7CNA v4.0 | 0.8% | 2024-12-05 | Fix |
| CVE-2024-52564 | I-O DATA DEVICE UD-LT1 firewall function vulnerability | 7.5CNA v3.0 | 0.6% | 2024-12-05 | |
| CVE-2024-52271 | PDF Document spoofing in Documenso | 8.2CNA v4.0 | 0.2% | 2024-12-05 | |
| CVE-2024-52270 | PDF Document spoofing in DropBox Sign(HelloSign) | 8.2CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-51555 | ABB ASPECT-Enterprise force Change of default credentials | 9.3CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-51554 | ABB ASPECT-Enterprise off-by-one-error | 8.8CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-51551 | ABB ASPECT-Enterprise default credentials | 9.3CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-51550 | ABB ASPECT-Enterprise Data Validation / Sanitization | 9.3CNA v4.0 | 1.8% | 2024-12-05 | Exploit codeFix |
| CVE-2024-51549 | ABB ASPECT-Enterprise absolute path traversal | 9.3CNA v4.0 | 0.5% | 2024-12-05 | Fix |
| CVE-2024-51548 | ABB ASPECT-Enterprise dangerous file upload | 8.7CNA v4.0 | 0.6% | 2024-12-05 | Fix |
| CVE-2024-51546 | ABB ASPECT, NEXUS and MATRIX project backup bundles information disclosure | 8.7CNA v4.0 | 1.5% | 2024-12-05 | Exploit codeFix |
| CVE-2024-51545 | ABB ASPECT, NEXUS and MATRIX username management functions vulnerability | 9.3CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-51544 | ABB ASPECT-Enterprise, NEXUS and MATRIX Series Service Control vulnerability | 8.8CNA v4.0 | 13.2% | 2024-12-05 | Emerging ThreatsFix |
| CVE-2024-51543 | ABB ASPECT-Enterprise information disclosure | 8.8CNA v4.0 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-51542 | ABB ASPECT-Enterprise, NEXUS and MATRIX Series dependency configuration files vulnerability | 8.8CNA v4.0 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-51541 | ABB ASPECT-Enterprise local file inclusion | 8.8CNA v4.0 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-48847 | ABB ASPECT-Enterprise MD5 bypass operation | 8.8CNA v4.0 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-48846 | ABB ASPECT-Enterprise Cross Side Request Forgery, CSRF | 7.1CNA v4.0 | 0.6% | 2024-12-05 | Exploit codeFix |
| CVE-2024-48845 | ABB ASPECT-Enterprise weak password Rules/Strength | 9.3CNA v4.0 | 1.8% | 2024-12-05 | Exploit codeFix |
| CVE-2024-48844 | ABB ASPECT-Enterprise denial of service, DoS | 7.2CNA v4.0 | 0.9% | 2024-12-05 | Exploit codeFix |
| CVE-2024-48843 | ABB ASPECT-Enterprise denial of service, DoS | 7.6CNA v4.0 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-48840 | ABB ASPECT-Enterprise unauthorized access | 9.3CNA v4.0 | 2.1% | 2024-12-05 | Exploit codeFix |
| CVE-2024-48839 | ABB ASPECT-Enterprise remote code execution, RCE | 9.3CNA v4.0 | 2.8% | 2024-12-05 | Exploit codeFix |
| CVE-2024-47133 | I-O DATA DEVICE UD-LT1 OS command injection | 7.2CNA v3.0 | 0.9% | 2024-12-05 | |
| CVE-2024-45841 | I-O DATA DEVICE UD-LT1 incorrect permission assignment | 6.5CNA v3.0 | 0.5% | 2024-12-05 | |
| CVE-2024-45319 | SonicWall SMA100 hard-coded credentials | 6.3CISA ADP v3.1 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-45318 | SonicWall SMA100 stack-based buffer overflow | 8.1CISA ADP v3.1 | 1.0% | 2024-12-05 | Fix |
| CVE-2024-42195 | HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection | 3.1CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-41579 | DTStack Taier listNames function jobName parameter SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2024-12-05 | |
| CVE-2024-40763 | SonicWall SMA100 heap-based buffer overflow | 7.5CISA ADP v3.1 | 0.9% | 2024-12-05 | Fix |
| CVE-2024-38920 | Open Robotics Nav2 nav2_amcl max_beams parameter use-after-free | 9.1CISA ADP v3.1 | 0.5% | 2024-12-05 | |
| CVE-2024-38910 | Open Robotics Nav2 nav2_amcl node use-after-free | 7.5CISA ADP v3.1 | 0.5% | 2024-12-05 | |
| CVE-2024-37863 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file. | 9.8CISA ADP v3.1 | 0.6% | 2024-12-05 | |
| CVE-2024-37862 | Open Robotic Robotic Operating System buffer overflow | 7.3CISA ADP v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-37861 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file. | 9.8CISA ADP v3.1 | 0.6% | 2024-12-05 | |
| CVE-2024-37860 | Open Robotic Operating System buffer overflow | 7.3CISA ADP v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-30964 | Open Robotics Robotic Operating System insecure permissions | 7.8CISA ADP v3.1 | 0.2% | 2024-12-05 | |
| CVE-2024-30963 | Open Robotics Robotic Operating System buffer overflow | 7.8CISA ADP v3.1 | 0.2% | 2024-12-05 | |
| CVE-2024-30962 | Open Robotics Robot Operating System buffer overflow | 7.8v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-30961 | Open Robotics Robot Operating System insecure permissions | 7.8v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-12247 | Mattermost improper propagation of permission scheme updates across cluster nodes | 4.6CNA v3.1 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-12235 | Shenzhen Dashi Tongzhou Information Technology AgileBPM improper access control | 8.8v3.1 | 0.6% | 2024-12-05 | |
| CVE-2024-12234 | 1000 Projects Beauty Parlour Management System edit-customer-detailed.php SQL injection | 9.8v3.1 | 0.8% | 2024-12-05 | |
| CVE-2024-12233 | code-projects Online Notice Board Profile Picture registration.php unrestricted upload | 9.8v3.1 | 0.8% | 2024-12-05 | |
| CVE-2024-12232 | code-projects Simple CRUD Functionality index.php cross-site scripting | 6.1v3.1 | 0.4% | 2024-12-05 | |
| CVE-2024-12231 | CodeZips Project Management System index.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-05 | |
| CVE-2024-12230 | PHPGurukul Complaint Management System subcategory.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-05 | |
| CVE-2024-12229 | PHPGurukul Complaint Management System complaint-search.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-05 | |
| CVE-2024-12228 | PHPGurukul Complaint Management System user-search.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-05 | |
| CVE-2024-12227 | MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference | 6.8CNA v4.0 | 0.2% | 2024-12-05 | Exploit code |
| CVE-2024-12188 | 1000 Projects Library Management System stu.php SQL injection | 9.8v3.1 | 0.7% | 2024-12-05 | |
| CVE-2024-12187 | 1000 Projects Library Management System showbook.php SQL injection | 9.8v3.1 | 0.6% | 2024-12-05 | |
| CVE-2024-12186 | code-projects Hotel Management System Available Room hotelnew.c stack-based overflow | 7.8v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-12185 | code-projects Hotel Management System Administrator Login Password stack-based overflow | 7.8v3.1 | 0.3% | 2024-12-05 | |
| CVE-2024-12130 | Rockwell Automation Arena® out-of-bounds read | 8.5CNA v4.0 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-12094 | Information disclosure vulnerability in Tinxy | 5.4CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-11942 | Drupal core Moderately critical improper error handling SA-CORE-2024-002 | 5.9CISA ADP v3.1 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-11941 | Drupal core Moderately critical denial of service SA-CORE-2024-001 | 7.5CISA ADP v3.1 | 0.5% | 2024-12-05 | Fix |
| CVE-2024-11779 | WIP WooCarousel Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-11429 | premio Stars Testimonials testimonials slider shortcode local file inclusion | 8.8CNA v3.1 | 0.7% | 2024-12-05 | Fix |
| CVE-2024-11420 | Blocksy WordPress theme authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-11341 | Simple Redirection WordPress plugin cross-site request forgery to arbitrary site redirect | 4.3CNA v3.1 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-11324 | Accounting for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-11317 | ABB ASPECT-Enterprise PHP session fixation | 9.3CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-11316 | ABB ASPECT-Enterprise file size check resource exhaustion | 8.7CNA v4.0 | 0.6% | 2024-12-05 | Fix |
| CVE-2024-11158 | Rockwell Automation Arena DOE file parsing vulnerability | 8.5CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-11156 | Rockwell Automation Arena® out-of-bounds write | 8.5CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-11155 | Rockwell Automation Arena® use-after-free | 8.5CNA v4.0 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-11148 | OpenBSD httpd(8) null dereference | 8.7CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-10937 | Related Posts WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-10933 | OpenBSD readdir directory traversal | 5.5v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-10881 | LUNA RADIO PLAYER WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-10848 | NewsMunch WordPress theme authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-10777 | AnyWhere Elementor WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-10716 | Pegasystems Pega Infinity cross-site scripting | 5.9CNA v3.1 | 0.2% | 2024-12-05 | Fix |
| CVE-2024-10178 | Gutentor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-10056 | Contact Form Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-05 | Fix |
| CVE-2024-6784 | ABB ASPECT-Enterprise SSRF server side request forgery | 8.7CNA v4.0 | 0.5% | 2024-12-05 | Fix |
| CVE-2024-6516 | ABB ASPECT-Enterprise cross-site scripting XSS | 9.3CNA v4.0 | 1.1% | 2024-12-05 | Exploit codeFix |
| CVE-2024-6515 | ABB ASPECT-Enterprise unauthorized file access | 8.7CNA v4.0 | 0.4% | 2024-12-05 | Fix |
| CVE-2024-54675 | MISP workflows editor stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-12-04 | |
| CVE-2024-54674 | MISP misp-galaxy cluster export stored cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2024-12-04 | |
| CVE-2024-54661 | dest-unreach socat symlink following | 9.8CISA ADP v3.1 | 0.8% | 2024-12-04 | Fix |
| CVE-2024-54158 | JetBrains YouTrack spoofing | 3.5CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-54157 | JetBrains YouTrack regular expression denial of service | 4.3CNA v3.1 | 0.6% | 2024-12-04 | Fix |
| CVE-2024-54156 | JetBrains YouTrack prototype pollution | 4.2CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-54155 | JetBrains YouTrack missing authorization | 3.7CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-54154 | JetBrains YouTrack relative path traversal | 8.0CNA v3.1 | 0.7% | 2024-12-04 | Fix |
| CVE-2024-54153 | JetBrains YouTrack missing authorization | 3.1CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-54134 | Solana Labs web3.js library information disclosure | 8.3CNA v4.0 | 0.5% | 2024-12-04 | Fix |
| CVE-2024-54132 | GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal | 6.3CNA v4.0 | 0.6% | 2024-12-04 | Fix |
| CVE-2024-54002 | Dependency-Track allows enumeration of managed users via /API/v1/user/login endpoint | 5.3CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-53982 | Arbitrary file download in ZOO-Project Echo Example | 8.7CNA v4.0 | 0.5% | 2024-12-04 | |
| CVE-2024-53614 | Thinkware Cloud hardcoded decryption key privilege escalation | 6.5CISA ADP v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-53140 | Linux kernel netlink dump handling vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53139 | Linux kernel SCTP IPv6 support use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53138 | Linux kernel mlx5e kTLS driver vulnerability | 9.8CNA v3.1 | 0.5% | 2024-12-04 | Fix |
| CVE-2024-53137 | Linux kernel ARM cacheflush syscall vulnerability | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53136 | Linux kernel shmem getattr deadlock | 7.5CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-53135 | In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode module param behind CONFIG_BROKEN, i.e. disable support for virtualizing Intel PT via guest/host mode unless BROKEN=y. There are myr | 8.8CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53134 | Linux kernel imx93-blk-ctrl kernel panic | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53133 | Linux kernel AMD display driver double free | 7.8CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53132 | Linux kernel Xe GPU OA driver vulnerability | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53131 | Linux kernel NILFS2 filesystem null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53130 | Linux kernel NILFS2 filesystem null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53129 | Linux kernel Rockchip VOP driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53128 | Linux kernel task stack pointer tagging vulnerability | 5.5v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53127 | Linux kernel dw_mmc driver denial of service | 7.8CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53126 | Linux kernel SolidRun vDPA driver vulnerability | 7.1CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-53125 | Linux kernel BPF verifier register tracking vulnerability | 7.8CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-52676 | Emiloimagtolis Online Discussion Forum cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2024-12-04 | |
| CVE-2024-52277 | PDF Document spoofing in DocuSeal | 8.2CNA v4.0 | 0.2% | 2024-12-04 | |
| CVE-2024-52276 | PDF Document spoofing in DocuSign | 7.5CISA ADP v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-52275 | Denial of service on Tenda AC6V2 due to stack overflow | 9.8v3.1 | 0.6% | 2024-12-04 | |
| CVE-2024-52274 | Denial of service on Tenda AC6V2 due to stack overflow | 9.8v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-52273 | Denial of service on Tenda AC6V2 due to stack overflow | 9.8v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-52272 | Denial of service on Tenda AC6V2 due to stack overflow | 9.8v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-52269 | AI Assistant PDF Document spoofing in DocuSign | 8.1CISA ADP v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-51465 | IBM App Connect Enterprise Certified Container command execution | 8.8CNA v3.1 | 0.7% | 2024-12-04 | Fix |
| CVE-2024-51210 | Firepad allows insecure document access | 5.3CISA ADP v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-50947 | Davidepianca98 Kmqtt denial of service | 7.5CISA ADP v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-48453 | Inovance AM401_CPU1608TPTN ExecuteUserProgramUpgrade function code injection | 9.8CISA ADP v3.1 | 1.0% | 2024-12-04 | |
| CVE-2024-45717 | SolarWinds Platform Cross- Site Scripting vulnerability | 7.0CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-45207 | Veeam Agent For Windows DLL injection | 7.0CNA v3.0 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-45206 | Veeam Service Provider Console server-side request forgery | 6.5CNA v3.0 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-45205 | Ubiquiti UniFi iOS App improper certificate validation | 7.1CNA v3.0 | 0.1% | 2024-12-04 | |
| CVE-2024-45204 | Veeam Backup and Replication incorrect authorization | 4.3NVD v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-42457 | Veeam Backup and Replication insufficiently protected credentials | 6.5NVD v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-42456 | Veeam Backup and Replication missing authentication | 8.8v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-42455 | Veeam Backup and Replication missing authentication | 8.1v3.1 | 15.1% | 2024-12-04 | Fix |
| CVE-2024-42453 | Veeam Backup and Replication missing authorization | 8.1v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-42452 | Veeam Backup and Replication incorrect authorization | 8.8v3.1 | 0.5% | 2024-12-04 | Fix |
| CVE-2024-42451 | Veeam Backup and Replication cleartext storage of sensitive information | 6.5NVD v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-42449 | Veeam Service Provider Console incorrect permission assignment | 7.1CNA v3.0 | 5.8% | 2024-12-04 | |
| CVE-2024-40745 | tassos.gr Convert Forms component for Joomla reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2024-12-04 | |
| CVE-2024-40744 | Extension tassos.gr unrestricted file upload in Convert Forms component for Joomla | 9.8CISA ADP v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-40717 | Veeam Backup and Replication missing authentication | 8.8v3.1 | 0.7% | 2024-12-04 | Fix |
| CVE-2024-39219 | An issue in Aginode GigaSwitch V5 before version 7.06G allows authenticated attackers with Administrator privileges to upload an earlier firmware version, exposing the device to previously patched vulnerabilities. | 8.8CISA ADP v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-39163 | Pyspider cross-site request forgery (CSRF) via the Flask endpoints | 8.8CISA ADP v3.1 | 0.2% | 2024-12-04 | |
| CVE-2024-38829 | Spring LDAP sensitive data exposure for case-sensitive comparisons | 3.7CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-37575 | The Mister org.mistergroup.shouldianswer application 1.4.264 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the org.mistergroup.shouldianswer.ui.default_dialer.DefaultDialerActivity component. | 7.5CISA ADP v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-37574 | GriceMobile Grice call app MobileActivity component incorrect permission assignment | 8.2CISA ADP v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-20397 | Cisco NX-OS Software Image Verification Bypass vulnerability | 5.2CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-12196 | Devolutions Server permission component incorrect authorization | 6.5CISA ADP v3.1 | 0.5% | 2024-12-04 | Fix |
| CVE-2024-12183 | DedeCMS HTTP POST request carbuyaction.php RemoveXSS cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-12182 | DedeCMS soft_add.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-12181 | DedeCMS SWF file uploads_add.php cross-site scripting | 5.4v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-12180 | DedeCMS article_add.php cross-site scripting | 5.4v3.1 | 0.5% | 2024-12-04 | |
| CVE-2024-12151 | Devolutions Server user migration feature incorrect permission assignment | 5.0CISA ADP v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-12149 | Devolutions Remote Desktop Manager incorrect permission assignment | 8.1CISA ADP v3.1 | 0.6% | 2024-12-04 | Fix |
| CVE-2024-12148 | Devolutions Server permission validation component incorrect authorization | 4.3CISA ADP v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-12147 | Netgear R6900 HTTP header upgrade_check.cgi buffer overflow | 7.1CNA v4.0 | 0.8% | 2024-12-04 | |
| CVE-2024-12138 | horilla create_skills deserialization | 8.8v3.1 | 0.7% | 2024-12-04 | |
| CVE-2024-12123 | Issuetrak ticket requester field vulnerability | 5.3CNA v4.0 | 0.4% | 2024-12-04 | |
| CVE-2024-12107 | Double free in µD3TN | 7.5CNA v3.1 | 0.5% | 2024-12-04 | Fix |
| CVE-2024-12099 | Dollie Hub Build Your Own WordPress Cloud Platform plugin post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-12056 | arcinfo PcVue client Secret not checked with OAuth Password grant type | 2.3CNA v4.0 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-11985 | ASUS RT-AX55 certain improper input validation | 4.4CNA v3.1 | 0.4% | 2024-12-04 | |
| CVE-2024-11952 | Classic Addons WPBakery Page Builder WordPress plugin limited local PHP file inclusion | 7.5CNA v3.1 | 0.9% | 2024-12-04 | Fix |
| CVE-2024-11935 | Email Address Obfuscation WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11903 | WP eCards WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11897 | Contact Form, Survey and Form Builder MightyForms WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11880 | B Testimonial testimonial plugin for WP WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11854 | Listdom Business Directory and Classified Ads Listings WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11814 | Additional Custom Order Status for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11813 | Pulsating Chat Button WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-11807 | NPS computy WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11769 | Flower Delivery by Florist One WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-11747 | Responsive Videos WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-04 | |
| CVE-2024-11643 | Accessibility by AllAccessible WordPress plugin unauthorized access | 8.8CNA v3.1 | 0.7% | 2024-12-04 | Exploit codeFix |
| CVE-2024-11479 | Issuetrak ticket comment function HTML injection | 5.1CNA v4.0 | 0.4% | 2024-12-04 | |
| CVE-2024-11466 | Intro Tour Tutorial DeepPresentation WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-11398 | Synology Router Manager (SRM) path traversal | 8.1CNA v3.1 | 0.6% | 2024-12-04 | Fix |
| CVE-2024-11293 | Registration Forms WordPress plugin authentication bypass | 8.1CNA v3.1 | 0.5% | 2024-12-04 | Fix |
| CVE-2024-11093 | SG Helper WordPress plugin stored cross-site scripting | 5.5CNA v3.1 | 0.3% | 2024-12-04 | |
| CVE-2024-10952 | wpkube Authors List code injection | 7.3CNA v3.1 | 0.6% | 2024-12-04 | Fix |
| CVE-2024-10885 | SearchIQ The Search Solution WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-10832 | Posti Shipping WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-10787 | LA-Studio Element Kit for Elementor WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-10664 | Knowledge Base documentation and wiki plugin WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-10663 | Eleblog WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2024-12-04 | |
| CVE-2024-10587 | Funnelforms Free WordPress plugin authenticated (Contributor+) PHP object injection | 8.8CNA v3.1 | 0.6% | 2024-12-04 | |
| CVE-2024-10576 | Unauthorized factory reset of Infinix devices | 9.4CNA v4.0 | 0.2% | 2024-12-04 | |
| CVE-2024-10567 | TI WooCommerce Wishlist WordPress plugin unauthorized access | 7.5CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-9404 | Moxa VPort 07-3 Series denial of service | 6.9CNA v4.0 | 0.7% | 2024-12-04 | Fix |
| CVE-2024-8962 | WPBITS Addons For Elementor Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-04 | Fix |
| CVE-2024-8894 | Out-of-bounds write vulnerability in ODA SDK versions | 8.1CNA v4.0 | 0.2% | 2024-12-04 | Fix |
| CVE-2024-7488 | Business logic error in RestApp Inc.'s Online Ordering System | 5.3CNA v3.1 | 0.3% | 2024-12-04 | |
| CVE-2024-5020 | Colibri Page Builder WordPress plugin cross-site scripting | 6.4CNA v3.1 | 0.4% | 2024-12-04 | Fix |
| CVE-2024-54131 | Kolide agent privilege escalation (Windows, Versions,) | 7.3CNA v4.0 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-54000 | Mobile Security Framework (MobSF) bypass of SSRF fix | 7.5CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-53999 | Mobile Security Framework stored cross-site scripting vulnerability in Diff or Compare Functionality | 8.1CNA v3.1 | 0.5% | 2024-12-03 | Fix |
| CVE-2024-53921 | Samsung Magician CSV injection | 2.8v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-53867 | Synapse Matrix has a partial room state leak via Sliding Sync | 4.3CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-53863 | Matrix Synapse thumbnail generation vulnerability | 8.2CNA v4.0 | 0.6% | 2024-12-03 | Fix |
| CVE-2024-53672 | Aruba ClearPass Policy Manager web-based management interface command injection | 4.7CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-53502 | SEMCMS SQL injection | 3.8CISA ADP v3.1 | 0.3% | 2024-12-03 | |
| CVE-2024-53257 | Vitess allows HTML injection in /debug/querylogz & /debug/env | 4.9CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-52815 | Synapse allows a a malformed invite to break the invitee's `/sync` | 8.7CNA v4.0 | 0.6% | 2024-12-03 | Fix |
| CVE-2024-52805 | Synapse allows unsupported content types to lead to memory exhaustion | 8.2CNA v4.0 | 0.7% | 2024-12-03 | Fix |
| CVE-2024-52548 | Lorex 2K Indoor Wi-Fi Security Camera Code signing bypass | 6.7CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-52547 | Lorex 2K Indoor Wi-Fi Security Camera stack buffer overflow | 7.2CNA v3.1 | 0.7% | 2024-12-03 | Fix |
| CVE-2024-52546 | Lorex 2K Indoor Wi-Fi Security Camera null pointer dereference | 5.3CNA v3.1 | 0.8% | 2024-12-03 | Fix |
| CVE-2024-52545 | Lorex 2K Indoor Wi-Fi Security Camera Out-of-bounds heap read | 6.5CNA v3.1 | 0.7% | 2024-12-03 | Fix |
| CVE-2024-52544 | Lorex 2K Indoor Wi-Fi Security Camera stack buffer overflow | 9.8CNA v3.1 | 1.1% | 2024-12-03 | Fix |
| CVE-2024-51773 | Aruba ClearPass Policy Manager web-based management interface stored cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-51772 | HPE Aruba Networking ClearPass Policy Manager authenticated remote code execution | 6.4CNA v3.1 | 0.5% | 2024-12-03 | Fix |
| CVE-2024-51771 | Aruba ClearPass Policy Manager web-based management interface command injection | 7.2CNA v3.1 | 0.8% | 2024-12-03 | Fix |
| CVE-2024-51363 | Hodoku v2.3.0 to v2.3.2 deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.6% | 2024-12-03 | |
| CVE-2024-51114 | Digital China Yunke customizable.php command injection | 8.8CISA ADP v3.1 | 0.9% | 2024-12-03 | |
| CVE-2024-50948 | mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management. An attacker can exhaust system memory and crash the broker by establishing and maintaining a large number of malicious, long-term publish/subscribe sessions. | 7.5CISA ADP v3.1 | 0.6% | 2024-12-03 | |
| CVE-2024-49421 | Samsung Mobile Quick Share Agent path traversal | 4.3CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-49420 | Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitrary activity. | 7.5CNA v3.1 | 0.5% | 2024-12-03 | |
| CVE-2024-49419 | Samsung GamingHub webview vulnerability | 4.3CNA v3.1 | 0.4% | 2024-12-03 | |
| CVE-2024-49418 | Samsung GamingHub webview vulnerability | 6.5CNA v3.1 | 0.5% | 2024-12-03 | |
| CVE-2024-49417 | Samsung Mobile Smart Touch Call implicit intent for sensitive communication | 2.0CNA v3.1 | 0.1% | 2024-12-03 | Fix |
| CVE-2024-49416 | Samsung Mobile SmartThings implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2024-12-03 | Fix |
| CVE-2024-49415 | Samsung Mobile Devices libsaped.so out-of-bounds write | 8.1CNA v3.1 | 1.0% | 2024-12-03 | Fix |
| CVE-2024-49414 | Samsung Mobile Devices Dex Mode authentication bypass | 2.4CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-49413 | Samsung Mobile Devices SmartSwitch improper signature verification | 7.1CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-49412 | Samsung Mobile Devices settings improper input validation | 5.5CNA v3.1 | 0.2% | 2024-12-03 | |
| CVE-2024-49411 | Samsung Mobile Devices ThemeCenter path traversal | 4.3CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-49410 | Samsung Mobile Devices libswmfextractor.so out-of-bounds write | 5.9CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-48080 | An issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request. NOTE: the Supplier indicates that exploitation cannot occur because of the protection mechanism in the validateTopic function in lib/utils.js. | 7.5CISA ADP v3.1 | 0.7% | 2024-12-03 | |
| CVE-2024-47476 | Dell NetWorker Management Console improper signature verification | 7.8CNA v3.1 | 0.1% | 2024-12-03 | Fix |
| CVE-2024-46625 | /documentCache/upload endpoint of InfoDom Performa An arbitrary file upload | 8.8CISA ADP v3.1 | 0.6% | 2024-12-03 | |
| CVE-2024-46624 | InfoDom Performa 365 users API privilege escalation | 8.8CISA ADP v3.1 | 0.4% | 2024-12-03 | |
| CVE-2024-45757 | Centreon BAM user-settings form SQL injection | 7.2CISA ADP v3.1 | 0.4% | 2024-12-03 | |
| CVE-2024-45676 | IBM Cognos Controller file upload | 4.3CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-45106 | Apache Ozone: Improper authentication when generating S3 secrets | 8.1CISA ADP v3.1 | 0.6% | 2024-12-03 | Fix |
| CVE-2024-45068 | Hitachi Ops Center Common Services Authentication information disclosure | 7.1CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-42422 | Dell NetWorker insecure direct object reference | 8.3CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-41777 | IBM Cognos Controller hard coded credentials | 7.5CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-41776 | IBM Cognos Controller cross-site request forgery | 6.5CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-41775 | IBM Cognos Controller information disclosure | 5.9CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-40691 | IBM Cognos Controller file upload | 8.0CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-37303 | Synapse unauthenticated writes to the media repository allow planting of problematic content | 5.3CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-37302 | Synapse denial of service through media disk space consumption | 7.5CNA v3.1 | 0.6% | 2024-12-03 | Fix |
| CVE-2024-29404 | Razer Synapse 3 Chroma Effects Profiles command injection | 7.8CISA ADP v3.1 | 0.5% | 2024-12-03 | Exploit code |
| CVE-2024-25036 | IBM Cognos Controller authentication bypass | 4.3CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-25035 | IBM Cognos Controller information disclosure | 5.3CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-25020 | IBM Cognos Controller file upload | 5.5CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-25019 | IBM Cognos Controller file upload | 5.5CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-12082 | OpenHarmony ability Runtime has an out-of-bounds read permission bypass | 5.5CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-12062 | Charity Addon for Elementor WordPress plugin authenticated (Contributor+) post disclosure | 4.3CNA v3.1 | 0.3% | 2024-12-03 | |
| CVE-2024-12053 | Google Chrome V8 type confusion | 8.8v3.1 | 1.0% | 2024-12-03 | Fix |
| CVE-2024-11898 | Scratch and Win Giveaways and Contests WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11866 | BMLT Tabbed Map WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11853 | jAlbum Bridge WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11844 | IdeaPush WordPress plugin missing authorization to Board Term deletion | 4.3CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11805 | Quick License Manager WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11782 | WP Mailster WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11732 | BP Profile Shortcodes Extra WordPress plugin SQL injection | 6.5CNA v3.1 | 0.4% | 2024-12-03 | |
| CVE-2024-11707 | My auctions allegro WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-11461 | Form Data Collector WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-11453 | WordPress Pinterest Plugin WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-11391 | Advanced File Manager WordPress plugin authenticated (Subscriber+) arbitrary file upload | 7.5CNA v3.1 | 0.7% | 2024-12-03 | Fix |
| CVE-2024-11326 | Campaign Monitor Forms by Optin Cat WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2024-12-03 | Fix |
| CVE-2024-11325 | AWeber Forms by Optin Cat WordPress plugin reflected cross-site scripting | 5.2CNA v3.1 | 1.0% | 2024-12-03 | Fix |
| CVE-2024-11200 | Goodlayers Core WordPress plugin reflected cross-site scripting via font-family | 6.1CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-10893 | WP Booking Calendar WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-10484 | Spectra WordPress Gutenberg Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-10074 | OpenHarmony liteos_a has an use-after-free | 8.8CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-9978 | OpenHarmony liteos_a has an out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-9694 | CMSMasters Elementor Addon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2024-12-03 | Fix |
| CVE-2024-9200 | Zyxel VMG4005-B50A firmware "host" parameter of the diagnostic function command injection | 7.2CNA v3.1 | 1.2% | 2024-12-03 | Fix |
| CVE-2024-9197 | Zyxel VMG3625-T50B firmware parameter "action" of the CGI program buffer overflow | 4.9CNA v3.1 | 0.5% | 2024-12-03 | Fix |
| CVE-2024-9058 | Element Pack Elementor Addons WordPress plugin DOM-based stored cross-site scripting | 5.4v3.1 | 0.2% | 2024-12-03 | Fix |
| CVE-2024-8748 | Zyxel VMG8825-T50K firmware buffer overflow | 7.5CNA v3.1 | 0.5% | 2024-12-03 | Fix |
| CVE-2024-53992 | unzip-bot Allows remote code execution | 8.8CNA v4.0 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-53990 | AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s | 9.2CNA v4.0 | 0.6% | 2024-12-02 | Fix |
| CVE-2024-53989 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 2.3CNA v4.0 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-53988 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 2.3CNA v4.0 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-53987 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 2.3CNA v4.0 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-53986 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 2.3CNA v4.0 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-53985 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 2.3CNA v4.0 | 0.6% | 2024-12-02 | Fix |
| CVE-2024-53984 | Nanopb does not release memory on error return when using PB_DECODE_DELIMITED | 4.3CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-53981 | python-multipart has a denial of service (DoS) via deformation `multipart/form-data` boundary | 7.5CNA v3.1 | 0.6% | 2024-12-02 | Fix |
| CVE-2024-53941 | Victure RX1800 WiFi 6 Router Wi-Fi PSK generation vulnerability | 8.8CISA ADP v3.1 | 0.6% | 2024-12-02 | |
| CVE-2024-53940 | Victure RX1800 WiFi 6 Router ping utility parameter OS command injection | 8.8CISA ADP v3.1 | 2.2% | 2024-12-02 | Emerging Threats |
| CVE-2024-53939 | Victure RX1800 WiFi 6 Router OS command injection | 8.8CISA ADP v3.1 | 2.9% | 2024-12-02 | Emerging Threats |
| CVE-2024-53938 | Victure RX1800 WiFi 6 Router TELNET service missing authentication | 8.8CISA ADP v3.1 | 0.5% | 2024-12-02 | |
| CVE-2024-53937 | Victure RX1800 WiFi 6 Router TELNET service use of default credentials | 8.8CISA ADP v3.1 | 0.5% | 2024-12-02 | |
| CVE-2024-53900 | Mongoose search injection | 9.1CISA ADP v3.1 | 4.0% | 2024-12-02 | Reported exploitedNucleiExploit codeFix |
| CVE-2024-53862 | argoproj argo-workflows Access to Archived Argo Workflows with Fake Token in `client` mode | 6.3CNA v4.0 | 0.7% | 2024-12-02 | Fix |
| CVE-2024-53793 | eDoc Easy Tables WordPress plugin CSRF to SQL injection | 8.2CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53792 | Watu Quiz WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-53789 | Advanced What should we write next about WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53784 | Smart Marketing SMS and Newsletters Forms WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53782 | Photo Video Store WordPress plugin CSRF to cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53781 | SpatialMatch IDX WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53780 | Load More Posts WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53779 | Yahoo! WebPlayer WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53777 | Simple Header and Footer WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53776 | Donate Me WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53775 | DancePress (TRWA) WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53770 | RingCentral Communications WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53769 | Custom Post Type to Map Store WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53765 | Mins To Read WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53762 | FastBook WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53761 | WP Revisions Manager WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53759 | ArCa Payment Gateway WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53755 | Third Party Cookie Eraser WordPress plugin CSRF to cross-site scripting (XSS) | 7.1CNA v3.1 | 0.1% | 2024-12-02 | |
| CVE-2024-53754 | Out Of Stock Badge WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-53753 | CultBooking Hotel Booking Engine WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2024-12-02 | |
| CVE-2024-53751 | Build App Online WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53741 | Simple Popup WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53740 | WooCommerce Ultimate Gift Card WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53730 | April's Call Posts WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53729 | Blizzard Quotes WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53728 | Oliver Lindner Protect Your Content cross-site request forgery | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53727 | LinkLaunder SEO WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53726 | RealtyCandy IDX Broker Extended WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53725 | Post Hits Counter WordPress plugin CSRF to reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53724 | IceStats WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53723 | Google Plus Share and +1 Button WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53722 | Favicon My Blog WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53721 | Advanced Event Manager WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-53720 | WP-ISPConfig 3 WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53719 | Zajax Ajax Navigation WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53718 | Multi Feed Reader WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53717 | yPHPlista WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53716 | wp auto top WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53715 | Simple Travel Map WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53714 | Continue Shopping From Cart WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53713 | Silverlight Video Player WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53712 | Kevin's WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53711 | Hotlink2Watermark WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53710 | ITERAS WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53709 | Generic Elements WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53708 | AI Quiz WordPress plugin broken access control | 5.3CNA v3.1 | 0.6% | 2024-12-02 | |
| CVE-2024-53707 | Ahmeti Wp Güzel Sözler WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2024-12-02 | |
| CVE-2024-53617 | LibrePhotos A cross-site scripting | 4.8CISA ADP v3.1 | 0.5% | 2024-12-02 | |
| CVE-2024-53605 | Incorrect access control in the component content://com.handcent.messaging.provider.MessageProvider/ of Handcent NextSMS v10.9.9.7 allows attackers to access sensitive data. | 7.5CISA ADP v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-53566 | Sangoma asterisk path traversal | 5.5CISA ADP v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53564 | Sangoma FreePBX unrestricted file upload | 7.2v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-53484 | Ever Traduora JWT signing key privilege escalation | 8.8CISA ADP v3.1 | 0.5% | 2024-12-02 | |
| CVE-2024-53477 | jflyfox jfinal_cms deserialization of untrusted data | 9.8CISA ADP v3.1 | 0.9% | 2024-12-02 | Fix |
| CVE-2024-53459 | Sysax Multi Server cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-53375 | TP-Link Archer routers HomeShield tmp_get_sites function OS command injection | 8.0CISA ADP v3.1 | 42.1% | 2024-12-02 | Exploit code |
| CVE-2024-53364 | PHPGurukul Vehicle Parking Management System SQL injection | 5.4CISA ADP v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-53259 | quic-go affected by an ICMP Packet Too Large injection Attack on Linux | 6.5CNA v3.1 | 0.6% | 2024-12-02 | Fix |
| CVE-2024-53124 | Linux kernel socket forward allocation accounting race condition | 7.5CNA v3.1 | 0.6% | 2024-12-02 | Fix |
| CVE-2024-53123 | Linux kernel MPTCP disconnect handling race condition | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53122 | Linux kernel MPTCP subflow creation race condition | 7.5CNA v3.1 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-53121 | Linux kernel mlx5 flow steering table race condition | 7.8CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53120 | Linux kernel mlx5e connection tracking offload null pointer dereference | 7.5CNA v3.1 | 0.7% | 2024-12-02 | Fix |
| CVE-2024-53119 | Linux kernel vsock accept queue memory leak | 5.5v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53118 | Linux kernel vsock error queue memory leak | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53117 | Linux kernel vsock MSG_ZEROCOPY handling memory leak | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53116 | Linux kernel Panthor GPU buffer object mapping vulnerability | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53115 | Linux kernel vmwgfx framebuffer driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53114 | Linux kernel Zen4 client VMLOAD/VMSAVE virtualization denial of service | 5.5NVD v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53113 | Linux kernel bulk page allocator null pointer dereference | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53112 | Linux kernel OCFS2 group resize vulnerability | 5.5v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53111 | Linux kernel mremap page table move integer overflow | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53110 | Linux kernel vp_vdpa driver vulnerability | 7.3CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53109 | Linux kernel no-MMU VMA iterator denial of service | 7.8CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53108 | Linux kernel AMD display VSDB parser out-of-bounds read | 7.3CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53107 | Linux kernel pagemap scan interface integer overflow | 7.8CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53106 | Linux kernel IMA event digest logging out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53105 | Linux kernel page allocator memory leak | 5.5v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-53104 | Linux Kernel out-of-bounds write | 7.8NVD v3.1 | 3.4% | 2024-12-02 | KEVKCVFix |
| CVE-2024-53103 | Linux kernel hv_sock use-after-free | 7.8CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-52806 | SimpleSAMLphp SAML2 has an XXE in parsing SAML messages | 8.3CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-52732 | zeqp Warehouse Management System authentication token incorrect authorization | 9.1CISA ADP v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52724 | ZZCMS show.php SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-02 | |
| CVE-2024-52596 | SimpleSAMLphp xml-common XXE | 8.8CNA v4.0 | 1.0% | 2024-12-02 | Fix |
| CVE-2024-52503 | Tailored Tools WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-52502 | ImbaChat WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52494 | Dynamic To Top WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52493 | Meteor Slides WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52492 | Image horizontal reel scroll slideshow WordPress plugin stored cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52491 | Sticky Social Icons WordPress plugin stored cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52489 | Udidol Add Chat App Button plugin stored cross-site scripting | 5.9CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-52487 | Ultimate Classified Listings WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-52486 | Elementor Portfolio Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52484 | Wc Recently viewed products WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52483 | LeanPress WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52482 | Ortto WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-52479 | Jobify WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-52478 | Jobify WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-52477 | Document and Data Automation WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-52476 | Fediverse Embeds WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-52469 | WooCommerce Price Alert WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52468 | LeadBoxer WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-52467 | AI Responsive Gallery Album WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52466 | Explara Events WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-52465 | LGPD Framework WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52464 | amr shortcodes WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52463 | Post By Email WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52462 | WP e-Commerce Style Email WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52461 | Infinite Slider WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52460 | AtaraPay WooCommerce Payment Gateway WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52459 | Chameleoni Jobs WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-52458 | TM Islamic Helper WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52457 | Youneeq Recommendations WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52456 | Awesome Studio WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52455 | GoQSmile WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52454 | GoQMieruca WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | |
| CVE-2024-52453 | Library Bookshelves WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-52452 | Open edX LMS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2024-12-02 | |
| CVE-2024-51900 | What Would Seth Godin Do WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-50381 | Missing authentication for critical function in Snap One OVRC cloud | 8.8CNA v4.0 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-50380 | Authentication bypass by spoofing in Snap One OVRC cloud | 8.7CNA v4.0 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-49763 | PlexRipper allows API leak due to open CORS policy | 8.7CNA v4.0 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-49581 | Palantir com.palantir.gotham:external-artifacts access control issue impacting RV backed objects | 6.5CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-46909 | WhatsUp Gold WriteDataFile directory traversal remote code execution | 9.8CNA v3.1 | 48.9% | 2024-12-02 | Fix |
| CVE-2024-46908 | WhatsUp Gold GetFilterCriteria SQL injection privilege escalation | 8.8CNA v3.1 | 2.2% | 2024-12-02 | Fix |
| CVE-2024-46907 | WhatsUp Gold GetFilterCriteria SQL injection privilege escalation | 8.8CNA v3.1 | 2.2% | 2024-12-02 | Fix |
| CVE-2024-46906 | WhatsUp Gold GetSqlWhereClause SQL injection privilege escalation | 8.8CNA v3.1 | 40.4% | 2024-12-02 | Fix |
| CVE-2024-46905 | WhatsUp Gold GetOrderByClause SQL injection privilege escalation | 8.8CNA v3.1 | 2.2% | 2024-12-02 | Fix |
| CVE-2024-43053 | Qualcomm Snapdragon WLAN driver memory corruption | 7.8CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-43052 | Qualcomm Snapdragon improper input validation in Video Analytics and Processing | 7.8CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-43050 | Qualcomm Snapdragon stack-based buffer overflow in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-43049 | Qualcomm Snapdragon WLAN driver memory corruption | 7.8CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-43048 | Qualcomm Snapdragon stack-based buffer overflow in Performance | 7.8CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-39890 | Samsung Exynos 9820 out-of-bounds write | 8.1CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-39343 | Samsung Exynos 2100 improper quantity validation | 7.0CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-38827 | Spring Security authorization bypass for Case Sensitive Comparisons | 4.8CNA v3.1 | 0.4% | 2024-12-02 | Fix |
| CVE-2024-33063 | Qualcomm Snapdragon integer overflow or wraparound in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-33056 | Qualcomm Snapdragon buffer over-read in MProc | 8.4CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-33053 | Qualcomm Snapdragon use-after-free in Video | 6.7CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-33044 | Qualcomm Snapdragon improper validation of array index in Hypervisor | 8.4CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-33040 | Qualcomm Snapdragon use-after-free in Camera driver | 6.7CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-33039 | Qualcomm Snapdragon untrusted pointer dereference in Audio | 6.7CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-33037 | Qualcomm Snapdragon buffer over-read in Neural Processing Unit | 6.1CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-33036 | Qualcomm Snapdragon use of out-of-range pointer offset in Camera driver | 6.7CNA v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-31669 | rizin resource exhaustion | 7.5CISA ADP v3.1 | 0.5% | 2024-12-02 | |
| CVE-2024-29645 | radare2 radarorg buffer overflow | 7.8CISA ADP v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-20139 | MediaTek chipsets reachable assertion in Bluetooth | 6.5CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-20138 | MediaTek chipsets out-of-bounds read in wlan | 7.5CISA ADP v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-20137 | MediaTek chipsets uncaught exception in wlan | 7.5CISA ADP v3.1 | 1.3% | 2024-12-02 | Exploit codeFix |
| CVE-2024-20136 | MediaTek chipsets out-of-bounds read in DA | 6.2CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-20135 | MediaTek chipsets out-of-bounds write in soundtrigger | 6.7CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-20134 | MediaTek chipsets out-of-bounds write in ril | 6.7CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-20133 | MediaTek chipsets out-of-bounds write in Modem | 6.7CISA ADP v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-20132 | MediaTek chipsets out-of-bounds write in Modem | 6.7CISA ADP v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-20131 | MediaTek chipsets out-of-bounds write in Modem | 6.7CISA ADP v3.1 | 0.2% | 2024-12-02 | Fix |
| CVE-2024-20130 | MediaTek chipsets stack overflow in power | 6.7CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-20129 | MediaTek chipsets out-of-bounds read in Telephony | 7.5v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-20128 | MediaTek chipsets out-of-bounds read in Telephony | 7.5CISA ADP v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-20127 | MediaTek chipsets out-of-bounds read in Telephony | 7.5CISA ADP v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-20125 | MediaTek chipsets out-of-bounds write in vdec | 6.7CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-20116 | MediaTek chipsets out-of-bounds read in cmdq | 4.4CISA ADP v3.1 | 0.1% | 2024-12-02 | Fix |
| CVE-2024-12015 | weDevs WP Project Manager SQL injection in WordPress Project Manager plugin | 7.7CNA v3.1 | 0.5% | 2024-12-02 | Fix |
| CVE-2024-11856 | HPE IceWall Products, remote unauthorized data modification | 3.7CNA v3.1 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-10905 | IdentityIQ improper access control VulnerabilityIdentityIQ improper access control | 10.0CNA v3.1 | 0.9% | 2024-12-02 | Fix |
| CVE-2024-10490 | Authentication bypass flaw in several mapp components | 8.4CNA v4.0 | 0.5% | 2024-12-02 | |
| CVE-2024-8785 | WhatsUp Gold Registry Overwrite remote code execution | 9.8CNA v3.1 | 9.5% | 2024-12-02 | Fix |
| CVE-2024-5890 | ServiceNow Now Platform HTML injection in the Assessment plugin | 5.1CNA v4.0 | 0.3% | 2024-12-02 | Fix |
| CVE-2024-53752 | Stripe Donation WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2024-12-01 | |
| CVE-2024-53750 | PayPal Responder WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2024-12-01 |