CVE-2024 records published after 2024
This page lists the 5,832 CVE-2024 records published after 2024, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2024 list filters these records by severity or signal.
- Critical
- 59710.2% of these records
- Listed in CISA KEV
- 150.3% of these records
- Reported exploited
- 120.2% of these records
- Detection signal
- 1562.7% of these records
- Exploit code
- 2233.8% of these records
- Actionable vendor fix
- 3,83065.7% of these records
Figures as of 2026-10-24 13:18 UTC. Records published after 2024 have had from less than a month to about 22 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-58396 | YouDataSum CPAS Audit Management System V4 path traversal via downPlugs fileId | 8.7CNA v4.0 | 0.4% | 2026-10-22 | Reported exploited |
| CVE-2024-58394 | Retool XSS via /API/imageProxy SVG Proxying | 5.1CNA v4.0 | 0.2% | 2026-10-22 | Reported exploitedFix |
| CVE-2024-58393 | i-Netsolution Readymade Unilevel Ecommerce MLM SQL injection via product-details.php | 8.8CNA v4.0 | 0.3% | 2026-10-22 | Reported exploited |
| CVE-2024-7478 | WSO2 API Manager response discrepancy | 5.8CNA v3.1 | 0.2% | 2026-10-21 | Fix |
| CVE-2024-6423 | WSO2 API Manager improper input validation | 4.0CNA v3.1 | 0.1% | 2026-10-21 | Fix |
| CVE-2024-5563 | WSO2 Identity Server authentication flows missing authentication | 4.8CNA v3.1 | 0.2% | 2026-10-21 | Fix |
| CVE-2024-5139 | WSO2 Enterprise Integrator cross-site scripting | 6.1CNA v3.1 | 0.2% | 2026-10-21 | Fix |
| CVE-2024-4989 | Open redirection via Callback URL in WSO2 API Manager allows Phishing Attacks | 5.4CNA v3.1 | 0.2% | 2026-10-21 | Fix |
| CVE-2024-2323 | WSO2 Carbon User Manager Kernel RemoteUserStoreManagerService vulnerability | 4.8CNA v3.1 | 0.2% | 2026-10-20 | Fix |
| CVE-2024-4412 | Expression language injection via User Input in multiple WSO2 Products permits arbitrary Operations | 2.7CNA v3.1 | 0.3% | 2026-10-19 | Fix |
| CVE-2024-4457 | WSO2 Enterprise Integrator OS command injection | 9.1CISA ADP v3.1 | 0.4% | 2026-10-18 | Fix |
| CVE-2024-58398 | Coder open redirect via Login page redirect parameter | 5.3CNA v4.0 | 0.3% | 2026-10-17 | Fix |
| CVE-2024-58397 | MP4v2 heap out-of-bounds read via MP4File::GetChapters | 6.9CNA v4.0 | 0.1% | 2026-10-15 | |
| CVE-2024-22031 | Rancher users who can create Projects can gain access to arbitrary projects | 8.5CNA v3.1 | 0.4% | 2026-10-15 | Fix |
| CVE-2024-58392 | PhysicsFS out-of-bounds read via __PHYSFS_utf8codepoint | 4.8CNA v4.0 | 0.2% | 2026-10-14 | |
| CVE-2024-34326 | ProPhoenix Law RMS errorHandler.aspx cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2026-10-13 | |
| CVE-2024-34324 | ProPhoenix Law RMS ASP.NET_SessionId cookie session hijacking | 9.1CISA ADP v3.1 | 0.3% | 2026-10-13 | |
| CVE-2024-34323 | ProPhoenix Law RMS usrLogin$hdnPFID parameter insecure direct object reference | 10.0CISA ADP v3.1 | 0.4% | 2026-10-13 | |
| CVE-2024-34321 | ProPhoenix Law RMS Notes.aspx endpoint cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2026-10-13 | |
| CVE-2024-34320 | ProPhoenix Law RMS API endpoints vulnerability | 9.8CISA ADP v3.1 | 0.4% | 2026-10-13 | |
| CVE-2024-34319 | ProPhoenix Law RMS serviceURL parameter server-side request forgery | 6.5CISA ADP v3.1 | 0.3% | 2026-10-13 | |
| CVE-2024-58391 | Frappe XSS via Printview parameters | 5.3CNA v4.0 | 0.3% | 2026-10-12 | Fix |
| CVE-2024-58390 | Frappe privilege escalation via Document action | 8.7CNA v4.0 | 0.3% | 2026-10-12 | Fix |
| CVE-2024-58389 | HoloViz Panel from open redirect via next parameter | 5.1CNA v4.0 | 0.3% | 2026-10-12 | Fix |
| CVE-2024-8122 | WSO2 Identity Server potential brute force vulnerability due to non-expiring SMS OTPs | 5.9CNA v3.1 | 0.3% | 2026-10-08 | Fix |
| CVE-2024-58388 | Sharp Multifunction Printers local file inclusion via installed_emanual_down.html | 8.7CNA v4.0 | 0.8% | 2026-10-01 | Reported exploited |
| CVE-2024-58387 | Inspur HCM Cloud arbitrary file read via file/download endpoint | 8.7CNA v4.0 | 0.6% | 2026-09-30 | Reported exploited |
| CVE-2024-31027 | Greek Universities Network cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2026-09-29 | |
| CVE-2024-31026 | Greek Universities Network Open eClass Platform course module chat input field remote code execution | 9.8CISA ADP v3.1 | 0.6% | 2026-09-29 | |
| CVE-2024-58386 | zoneminder ZoneMinder.x path traversal via files view | 7.1CNA v4.0 | 0.4% | 2026-09-28 | Fix |
| CVE-2024-42002 | Open Source Robotics Foundation Robot Operating System 2 ros2 topic hz tool code injection | 8.6CNA v4.0 | 0.2% | 2026-09-28 | |
| CVE-2024-56344 | IBM Cognos Analytics HTTP Strict Transport Security information disclosure | 5.9CNA v3.1 | 0.2% | 2026-09-18 | Fix |
| CVE-2024-38639 | QNAP QTS improper authentication | 4.8CNA v3.1 | 0.2% | 2026-09-18 | |
| CVE-2024-27123 | QNAP QcalAgent cross-site scripting | 5.2CNA v4.0 | 0.1% | 2026-09-18 | Fix |
| CVE-2024-11222 | Time-of-check time-of-use (TOCTOU) race condition in GitLab | 6.4CNA v3.1 | 0.3% | 2026-09-16 | Fix |
| CVE-2024-58385 | Yonyou U8 CRM SQL injection via fillbacksettingedit.php | 9.3CNA v4.0 | 0.4% | 2026-09-15 | Reported exploitedFix |
| CVE-2024-58384 | Tornado CRLF injection via CurlAsyncHTTPClient | 6.3CNA v4.0 | 0.2% | 2026-09-15 | Fix |
| CVE-2024-14029 | Tornado HTTP request smuggling via Transfer-Encoding | 9.0CNA v4.0 | 0.4% | 2026-09-15 | Fix |
| CVE-2024-58383 | Froxlor insecure file permissions mysql.conf | 8.4CNA v4.0 | 0.1% | 2026-09-14 | Fix |
| CVE-2024-23176 | mediawiki MassMessage cross-site scripting | 5.4CNA v3.1 | 0.2% | 2026-09-14 | Fix |
| CVE-2024-53922 | Samsung Exynos 8890 firmware improper quantity validation | 5.7CNA v3.1 | 0.2% | 2026-09-13 | |
| CVE-2024-12145 | BuddyPress WordPress plugin insecure direct object reference to Notifications deletion | 4.3CNA v3.1 | 0.2% | 2026-09-11 | Fix |
| CVE-2024-58382 | League/commonmark denial of service via Quadratic Complexity | 8.7CNA v4.0 | 0.3% | 2026-09-09 | Fix |
| CVE-2024-58381 | PocketMine-MP denial of service via LoginPacket | 8.7CNA v4.0 | 0.4% | 2026-09-09 | Fix |
| CVE-2024-58380 | PocketMine-MP denial of service via BookEditPacket | 7.1CNA v4.0 | 0.4% | 2026-09-09 | Fix |
| CVE-2024-11080 | Post Grid and Gutenberg Blocks ComboBlocks - Unauthenticated Hook injection | 9.8CNA v3.1 | 0.5% | 2026-09-05 | Reported exploitedFix |
| CVE-2024-35585 | Oxford Nanopore MinKNOW missing authentication | 8.6CNA v3.1 | 0.3% | 2026-09-02 | Fix |
| CVE-2024-7956 | Sensitive data exposure and Escalating Privileges vulnerabilities in DataMosaix™ Private Cloud | 7.6CNA v4.0 | 0.3% | 2026-09-02 | Fix |
| CVE-2024-3773 | LiveJournal Shortcode WordPress plugin Contributor+ stored XSS via shortcode | 5.9CNA v3.1 | 0.1% | 2026-09-02 | |
| CVE-2024-14047 | Elastic Winlogbeat Windows installer link following | 7.2CNA v3.1 | 0.1% | 2026-09-01 | Fix |
| CVE-2024-10085 | Schneider Electric EcoStruxure OPC UA Server Expert resource exhaustion | 8.2CNA v4.0 | 0.3% | 2026-09-01 | Fix |
| CVE-2024-7953 | Rockwell Automation DataEdgePlatform DataMosaix Private Cloud project administration vulnerability | 8.7CNA v4.0 | 0.2% | 2026-09-01 | Fix |
| CVE-2024-7952 | Rockwell Automation DataEdgePlatform DataMosaix™ Private Cloud information disclosure | 8.7CNA v4.0 | 0.4% | 2026-09-01 | Fix |
| CVE-2024-58379 | nodemailer ReDoS via attachDataUrls parameter | 6.9CNA v4.0 | 0.3% | 2026-08-31 | Fix |
| CVE-2024-58376 | Renovate command injection via helmv3 | 8.4CNA v4.0 | 0.7% | 2026-08-19 | Fix |
| CVE-2024-13942 | Rockchip RK3588s Secure BootROM race condition | 7.6CNA v3.1 | 0.2% | 2026-08-19 | |
| CVE-2024-14046 | OpenBoxes document upload controller unrestricted file upload | 5.3CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2024-14045 | OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization | 5.3CNA v4.0 | 0.4% | 2026-08-18 | Fix |
| CVE-2024-58375 | OpenTofu Secret Variable Leaking via Static Evaluation | 8.7CNA v4.0 | 0.4% | 2026-08-16 | Fix |
| CVE-2024-13784 | Contact Form WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.8% | 2026-08-16 | Fix |
| CVE-2024-58374 | Hongjing e-HR unauthenticated SQL injection via getSdutyTree | 8.7CNA v4.0 | 0.7% | 2026-08-13 | Reported exploited |
| CVE-2024-27253 | IBM DOORS Next reviews delete request improper authentication | 10.0CNA v3.1 | 0.6% | 2026-08-12 | Fix |
| CVE-2024-14044 | Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow | 5.3CNA v4.0 | 0.5% | 2026-08-12 | Fix |
| CVE-2024-14043 | Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow | 5.3CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2024-14042 | Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow | 5.3CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2024-39024 | PacketFence WebGUI interface setting remote code execution | 8.8CISA ADP v3.1 | 0.8% | 2026-08-06 | Exploit code |
| CVE-2024-10302 | WSO2 Identity Server user self-signup flow improper input validation | 4.0CNA v3.1 | 0.3% | 2026-08-06 | Fix |
| CVE-2024-8995 | WSO2 API Manager authorization code handling insufficient session expiration | 4.9CNA v3.1 | 0.2% | 2026-08-06 | Fix |
| CVE-2024-6832 | WSO2 Enterprise Integrator account lockout mechanism vulnerability | 5.9CNA v3.1 | 0.4% | 2026-08-06 | Fix |
| CVE-2024-6541 | WSO2 Micro Integrator Class Mediator information disclosure | 6.8CNA v3.1 | 0.3% | 2026-08-06 | Fix |
| CVE-2024-40683 | IBM Operations Analytics - Log Analysis session management insufficient session expiration | 6.3CNA v3.1 | 0.3% | 2026-07-30 | Fix |
| CVE-2024-25039 | IBM Engineering Requirements Management DOORS denial of service | 7.5CNA v3.1 | 0.5% | 2026-07-30 | Fix |
| CVE-2024-14041 | Legion of the Bouncy Castle BC-JAVA ML-KEM decapsulation leaks private key information | 8.2CNA v4.0 | 0.3% | 2026-07-28 | Fix |
| CVE-2024-14040 | Linux kernel nexthop ECMP weight handling vulnerability | 7.8CNA v3.1 | 0.1% | 2026-07-26 | Fix |
| CVE-2024-58355 | calcom cal.diy Cal.com cross-site scripting via booking questions | 9.3CNA v4.0 | 0.4% | 2026-07-23 | |
| CVE-2024-58354 | calcom cal.diy cal.com Repository takeover via pull_request_target Workflow | 8.5CNA v4.0 | 0.5% | 2026-07-23 | |
| CVE-2024-58353 | calcom cal.diy Cal.com cross-site scripting via booking questions | 9.3CNA v4.0 | 0.4% | 2026-07-23 | |
| CVE-2024-58330 | Bosch Camera Firmware missing authentication | 7.5CNA v3.1 | 0.5% | 2026-07-23 | Fix |
| CVE-2024-58023 | Bosch Configuration Manager information disclosure | 8.4CNA v3.1 | 0.1% | 2026-07-23 | Fix |
| CVE-2024-5300 | Canonical snapd AppArmor nss-systemd abstraction information disclosure | 5.6CNA v3.1 | 0.1% | 2026-07-21 | Fix |
| CVE-2024-51316 | Tenda TX9 firmware SetOnlineDevName denial of service | 7.5CISA ADP v3.1 | 0.5% | 2026-07-20 | |
| CVE-2024-51315 | Tenda TX9 firmware SetOnlineDevName stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2026-07-20 | |
| CVE-2024-51314 | Tenda TX9 firmware setMacFilterCfg stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2026-07-20 | |
| CVE-2024-51313 | Tenda TX9 firmware SetVirtualServerCfg stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2026-07-20 | |
| CVE-2024-51312 | Tenda TX9 firmware SetStaticRouteCfg stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2026-07-20 | |
| CVE-2024-51311 | Tenda TX9 firmware SetNetControlList stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2026-07-20 | |
| CVE-2024-58370 | SurrealDB uncontrolled recursion denial of service | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58369 | SurrealDB denial of service via Global parameters | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58368 | SurrealDB denial of service via HTTP headers | 8.7CNA v4.0 | 0.7% | 2026-07-18 | Fix |
| CVE-2024-58367 | SurrealDB improper authorization via SELECT Permissions | 6.5NVD v3.1 | 0.4% | 2026-07-18 | Fix |
| CVE-2024-58366 | SurrealDB format string via Scripting functions | 8.8NVD v3.1 | 0.6% | 2026-07-18 | Fix |
| CVE-2024-58365 | SurrealDB denial of service via Nonexistent function | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58364 | SurrealDB denial of service via Parsing Error | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58363 | SurrealDB authentication bypass via Database Switch | 5.3CNA v4.0 | 0.3% | 2026-07-18 | Fix |
| CVE-2024-58362 | SurrealDB Query injection via RPC API | 8.7CNA v4.0 | 0.6% | 2026-07-18 | Fix |
| CVE-2024-58361 | SurrealDB denial of service via Parser Exception | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58359 | SurrealDB denial of service via rand Sorting | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58358 | SurrealDB denial of service via Nonexistent Role | 6.9CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58357 | SurrealDB denial of service via rand::time | 7.1CNA v4.0 | 0.5% | 2026-07-18 | Fix |
| CVE-2024-58356 | SurrealDB permission bypass via DEFINE TABLE OVERWRITE | 6.3v3.1 | 0.3% | 2026-07-18 | Fix |
| CVE-2024-42214 | HCL Aftermarket EPC HTTP OPTIONS method vulnerability | 5.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23578 | HCL Software Aftermarket EPC permissive cross-domain policy | 4.2CNA v3.1 | 0.2% | 2026-07-17 | |
| CVE-2024-23577 | HCL Software Aftermarket EPC host header injection | 4.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23575 | HCL Software Aftermarket EPC information disclosure through error messages | 5.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23574 | HCL Software Aftermarket EPC response discrepancy | 5.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23573 | HCL Software Aftermarket EPC forced browsing | 3.7CNA v3.1 | 0.2% | 2026-07-17 | |
| CVE-2024-23572 | HCL Software Aftermarket EPC sensitive cookie without the Secure attribute | 4.2CNA v3.1 | 0.1% | 2026-07-17 | |
| CVE-2024-23571 | HCL Software Aftermarket EPC sensitive information in browser cache | 4.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23570 | HCL Software Aftermarket EPC clickjacking | 4.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23569 | HCL Software Aftermarket EPC cross-site scripting | 4.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23568 | HCL Software Aftermarket EPC information disclosure | 5.3CNA v3.1 | 0.4% | 2026-07-17 | |
| CVE-2024-23567 | HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser | 4.3CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23566 | HCL Software Aftermarket EPC missing brute-force protection | 6.5CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-23565 | HCL Software Aftermarket EPC improper interaction frequency control | 5.3CNA v3.1 | 0.4% | 2026-07-17 | |
| CVE-2024-23564 | HCL Software Aftermarket EPC inadequate encryption strength | 9.1CNA v3.1 | 0.3% | 2026-07-17 | |
| CVE-2024-58360 | stoatchat Unrestricted Account Creation | 6.9CNA v4.0 | 0.5% | 2026-07-16 | Fix |
| CVE-2024-34268 | EQ-3 Eqiva CC-RT-BLE Smart Radiator Thermostat Firmware Bluetooth connection missing authentication | 7.1CNA v3.1 | 0.3% | 2026-07-16 | |
| CVE-2024-32389 | Kerlink Kerlink Wirnet iStation buffer overflow | 3.5CNA v3.1 | 0.3% | 2026-07-16 | |
| CVE-2024-32387 | Kerlink Wirnet iStation 868 SNMP community string hard-coded credentials | 5.7CNA v3.1 | 0.3% | 2026-07-16 | |
| CVE-2024-32386 | Kerlink Kerlink Wirnet iStation path traversal | 7.3CNA v3.1 | 0.8% | 2026-07-16 | |
| CVE-2024-32385 | Kerlink Wirnet iStation 868 information disclosure | 4.3CNA v3.1 | 0.3% | 2026-07-16 | |
| CVE-2024-7708 | Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests | 7.5CNA v3.1 | 0.4% | 2026-07-14 | Fix |
| CVE-2024-56141 | Bixilon Minosoft CryptManager encryption routine predictable initialization vector | 5.0CNA v3.1 | 0.2% | 2026-07-07 | |
| CVE-2024-6228 | Notifications for Forms and WordPress Actions file inclusion path local file inclusion | 7.5CISA ADP v3.1 | 0.5% | 2026-07-06 | Fix |
| CVE-2024-1248 | Role Overwriting via Silent JIT Provisioning in multiple WSO2 Products enables privilege escalation | 4.8CNA v3.1 | 0.3% | 2026-07-04 | Fix |
| CVE-2024-58352 | Landray OA Unauthenticated HQL injection via wechatLoginHelper.do | 8.7CNA v4.0 | 0.9% | 2026-07-02 | |
| CVE-2024-14037 | Redsea Cloud eHR unauthenticated file upload RCE via PtFjk.mob | 9.3CNA v4.0 | 1.3% | 2026-07-02 | Fix |
| CVE-2024-23581 | HCL Traveler for Microsoft Outlook is susceptible to an application modification vulnerability | 6.7CNA v3.1 | 0.1% | 2026-06-26 | Fix |
| CVE-2024-54178 | IBM Db2 on Cloud Pak for Data database creation resource exhaustion | 6.5CNA v3.1 | 0.4% | 2026-06-22 | Fix |
| CVE-2024-51454 | IBM Engineering Workflow Management HTTP header injection | 6.5CNA v3.1 | 0.3% | 2026-06-22 | Fix |
| CVE-2024-58351 | Flowise remote code execution via overrideConfig parameter | 9.3CNA v4.0 | 0.9% | 2026-06-20 | Fix |
| CVE-2024-52488 | Grip WordPress theme arbitrary plugin Activation/Deactivation to RCE | 9.9CNA v3.1 | 0.5% | 2026-06-17 | |
| CVE-2024-49269 | my flatonica WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2026-06-17 | |
| CVE-2024-47477 | Dell PowerFlex Manager improper certificate validation | 6.5CNA v3.1 | 0.1% | 2026-06-17 | Fix |
| CVE-2024-37496 | Metro Magazine WordPress theme broken access control on Notice Dismissal | 4.3CNA v3.1 | 0.2% | 2026-06-17 | Fix |
| CVE-2024-37210 | AliExpress Dropshipping with AliNext Lite WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-06-17 | Fix |
| CVE-2024-35690 | Widget Options WordPress plugin Subscriber+ user Meta data exposure | 6.5CNA v3.1 | 0.3% | 2026-06-17 | Fix |
| CVE-2024-35648 | Emergency Password Reset WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2026-06-17 | Fix |
| CVE-2024-34810 | Skyline WP WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2026-06-17 | Fix |
| CVE-2024-33909 | iPages Flipbook WordPress plugin broken access control | 5.3CNA v3.1 | 0.2% | 2026-06-17 | Fix |
| CVE-2024-33685 | Startupzy WordPress theme broken access control | 4.3CNA v3.1 | 0.2% | 2026-06-17 | Fix |
| CVE-2024-32949 | Integrate Google Drive WordPress plugin broken access control | 8.3CNA v3.1 | 0.3% | 2026-06-17 | Fix |
| CVE-2024-32729 | ChatBot Conversational Forms WordPress plugin arbitrary file download | 7.5CNA v3.1 | 0.4% | 2026-06-17 | Fix |
| CVE-2024-31435 | Social Media Share Buttons and Social Sharing Icons WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2026-06-17 | Fix |
| CVE-2024-27928 | Vantage6: 2FA can be circumvented with hacked email access | 5.9CNA v4.0 | 0.3% | 2026-06-17 | Fix |
| CVE-2024-24769 | Vantage6: No limit on emails sent for password/MFA reset | 2.1CNA v4.0 | 0.3% | 2026-06-17 | Fix |
| CVE-2024-24709 | Shareaholic WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2026-06-17 | Fix |
| CVE-2024-39575 | Dell EMC VxRail Appliance plaintext password storage | 7.4CNA v3.1 | 0.1% | 2026-06-16 | Fix |
| CVE-2024-38487 | Dell EMC VxRail Appliance improper privilege management | 7.0CNA v3.1 | 0.1% | 2026-06-16 | Fix |
| CVE-2024-30476 | Dell PowerStore cross-site scripting | 5.4CNA v3.1 | 0.2% | 2026-06-16 | Fix |
| CVE-2024-24909 | Dell OpenManage command injection | 8.8CNA v3.1 | 0.4% | 2026-06-16 | Fix |
| CVE-2024-22451 | Dell Peripheral Manager uncontrolled search path | 6.7CNA v3.1 | 0.1% | 2026-06-16 | Fix |
| CVE-2024-22447 | Dell Peripheral Manager uncontrolled search path | 6.7CNA v3.1 | 0.1% | 2026-06-16 | Fix |
| CVE-2024-45636 | IBM QRadar EDR credential storage plaintext password storage | 4.1CNA v3.1 | 0.1% | 2026-06-11 | Fix |
| CVE-2024-32110 | Magepeople WpEvently cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2026-06-11 | Fix |
| CVE-2024-58350 | Ghidra use-after-free in Sleigh Backend via Static Initialization Order | 4.0v3.1 | 0.1% | 2026-06-10 | Fix |
| CVE-2024-21944 | AMD EPYC™ 7003 Series Processors improper input validation | 5.3CNA v3.1 | 0.2% | 2026-06-10 | |
| CVE-2024-58349 | WordPress Theme Travelscape arbitrary file upload | 9.3CNA v4.0 | 0.7% | 2026-06-08 | Exploit code |
| CVE-2024-58348 | WordPress Background Image Cropper remote code execution | 9.3CNA v4.0 | 0.8% | 2026-06-08 | Exploit code |
| CVE-2024-27892 | Arista EOS gNMI service missing authentication | 7.2CNA v4.0 | 0.3% | 2026-06-04 | |
| CVE-2024-27891 | Arista EOS MACsec egress ACL enforcement improper access control | 6.9CNA v4.0 | 0.3% | 2026-06-04 | Fix |
| CVE-2024-27890 | Arista EOS gNMI OpenConfig missing authentication | 7.2CNA v4.0 | 4.4% | 2026-06-04 | |
| CVE-2024-6858 | Arista EOS 802.1X multi-auth fallback VLAN vulnerability | 6.5CISA ADP v3.1 | 0.1% | 2026-06-04 | |
| CVE-2024-47273 | Synology Hyper Backup path traversal | 4.3CNA v3.1 | 0.3% | 2026-06-03 | Fix |
| CVE-2024-47263 | Synology Hyper Backup path traversal | 4.1CNA v3.1 | 0.3% | 2026-06-03 | Fix |
| CVE-2024-42206 | HCL iReflection Third party vulnerable and outdated components issue was detected in the web application | 3.1CNA v3.1 | 0.2% | 2026-06-02 | |
| CVE-2024-14036 | Dräger Core denial of service via Malformed SDC message | 8.7CNA v4.0 | 0.3% | 2026-06-02 | Fix |
| CVE-2024-52011 | launch-editor vulnerable to command injection via the crafted request on Windows | 7.5CNA v4.0 | 0.5% | 2026-06-01 | Fix |
| CVE-2024-40646 | Vertex vulnerable to path traversal | 8.6CNA v3.1 | 0.4% | 2026-06-01 | |
| CVE-2024-47097 | Reflected cross-site scripting in Follet School Solutions Destiny | 5.1CNA v4.0 | 0.3% | 2026-05-28 | Fix |
| CVE-2024-47096 | Reflected cross-site scripting in Follet School Solutions Destiny | 5.1CNA v4.0 | 0.3% | 2026-05-28 | Fix |
| CVE-2024-56462 | IBM QRadar SIEM is vulnerable to using components with known vulnerabilities | 7.2CNA v3.1 | 0.5% | 2026-05-27 | Fix |
| CVE-2024-47272 | Synology Surveillance Station IO module functionality incorrect authorization | 2.7CNA v3.1 | 0.2% | 2026-05-27 | Fix |
| CVE-2024-47271 | Synology Surveillance Station IPSpeaker component insufficiently protected credentials | 4.9CNA v3.1 | 0.3% | 2026-05-27 | Fix |
| CVE-2024-47270 | Synology Surveillance Station Archiving Push functionality improper preservation of permissions | 2.7CNA v3.1 | 0.2% | 2026-05-27 | Fix |
| CVE-2024-47269 | Synology Surveillance Station cleartext transmission of sensitive information | 4.9CNA v3.1 | 0.2% | 2026-05-27 | Fix |
| CVE-2024-47268 | Synology Surveillance Station AddOns functionality missing authorization | 4.9CNA v3.1 | 0.3% | 2026-05-27 | Fix |
| CVE-2024-47267 | Synology Surveillance Station path traversal | 2.7CNA v3.1 | 0.3% | 2026-05-27 | Fix |
| CVE-2024-40684 | IBM Operations Analytics - Log Analysis password policy weak password requirements | 5.9CNA v3.1 | 0.4% | 2026-05-27 | Fix |
| CVE-2024-28765 | IBM Security Directory Integrator information disclosure | 5.3CNA v3.1 | 0.4% | 2026-05-27 | Fix |
| CVE-2024-11399 | Synology BeeDrive for desktop redis-server component files accessible to external parties | 6.8CNA v3.1 | 0.1% | 2026-05-27 | Fix |
| CVE-2024-36343 | AMD EPYC™ 4004 System Management Mode improper input validation | 4.6CNA v4.0 | 0.2% | 2026-05-19 | |
| CVE-2024-36345 | AMD EPYC™ 4004 improper input validation | 4.6CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2024-36334 | AMD Radeon™ RX 7000 Series Graphics Products Radeon RGB tool improper signature verification | 7.0CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2024-36333 | AMD Cleanup Utility DLL hijacking | 7.0CNA v4.0 | 0.1% | 2026-05-15 | Fix |
| CVE-2024-36332 | AMD Radeon™ PRO V710 improper isolation | 6.8CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2024-36323 | AMD Radeon™ RX 7000 Series Graphics Products improper isolation | 8.8CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2024-21962 | AMD EPYC™ 4005 Series Processors improper input validation | 8.6CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2024-21950 | AMD Instinct™ MI300X remote management firmware out-of-bounds read | 1.8CNA v4.0 | 0.1% | 2026-05-15 | |
| CVE-2024-55045 | Firmament FMT-Firmware task_mavobc_entry function buffer overflow | 7.3CISA ADP v3.1 | 0.2% | 2026-05-13 | |
| CVE-2024-51395 | Ardupiot Copter Latest commit buffer overflow | 6.2CISA ADP v3.1 | 0.1% | 2026-05-13 | |
| CVE-2024-51394 | Ardupiot Copter Latest commit buffer overflow | 5.5CISA ADP v3.1 | 0.1% | 2026-05-13 | |
| CVE-2024-48519 | Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 buffer overflow | 6.2CISA ADP v3.1 | 0.1% | 2026-05-13 | |
| CVE-2024-47091 | Checkmk privilege escalation via mk_mysql agent plugin on Windows | 5.2CNA v4.0 | 0.1% | 2026-05-13 | Fix |
| CVE-2024-36315 | AMD EPYC™ Series 9004 Processors information disclosure | 5.7CNA v4.0 | 0.1% | 2026-05-13 | |
| CVE-2024-54017 | Siemens SIPROTEC 5 6MD84 (CP300) insufficient randomness | 6.9CNA v4.0 | 0.3% | 2026-05-12 | Fix |
| CVE-2024-0391 | Username Enumeration via Email OTP Flow in multiple WSO2 Products allows User Account Discovery | 5.3CNA v3.1 | 0.2% | 2026-05-11 | Fix |
| CVE-2024-53326 | LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(), leading to code execution. | 7.3CISA ADP v3.1 | 0.5% | 2026-05-08 | MetasploitExploit code |
| CVE-2024-51092 | LibreNMS has an authenticated OS command injection | 9.1CISA ADP v3.1 | 7.2% | 2026-05-08 | MetasploitExploit codeFix |
| CVE-2024-46508 | yeti-platform yeti hard-coded credentials | 7.5CISA ADP v3.1 | 0.4% | 2026-05-08 | KCV |
| CVE-2024-46507 | yeti-platform yeti custom template export function server-side template injection | 7.3CISA ADP v3.1 | 3.9% | 2026-05-08 | NucleiExploit codeKCV |
| CVE-2024-45257 | payload build page in BYOB command injection | 7.3CISA ADP v3.1 | 3.9% | 2026-05-08 | MetasploitExploit codeKCV |
| CVE-2024-33724 | SOPlanning groupe_save.php cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2026-05-08 | Nuclei |
| CVE-2024-33722 | SOPlanning projets.php SQL injection | 6.3CISA ADP v3.1 | 0.2% | 2026-05-08 | |
| CVE-2024-33288 | Prison Management System admin login page SQL injection | 7.3CISA ADP v3.1 | 0.8% | 2026-05-08 | NucleiExploit code |
| CVE-2024-30167 | Atlona AT-OME-MS42 Matrix Switcher time.cgi command injection | 6.3CISA ADP v3.1 | 1.1% | 2026-05-08 | Exploit code |
| CVE-2024-27686 | MikroTik RouterOS SMB service denial of service | 7.5CISA ADP v3.1 | 0.6% | 2026-05-08 | Exploit code |
| CVE-2024-43384 | Phoenix Contact: Improper removal of sensitive information in MGUARD products | 8.0CNA v3.1 | 0.3% | 2026-05-07 | Fix |
| CVE-2024-30151 | HCL BigFix Service Management (SM) is susceptible to broken access control | 8.3CNA v3.1 | 0.2% | 2026-05-06 | Fix |
| CVE-2024-52911 | Bitcoin Core improper access control | 7.5CISA ADP v3.1 | 0.4% | 2026-05-05 | |
| CVE-2024-13362 | Go Fetch Jobs WordPress plugin cross-site scripting | 6.1CNA v3.1 | 0.3% | 2026-05-01 | Fix |
| CVE-2024-39847 | Arbitrary file read and Server side request forgery via XML external entities in 4D Server SOAP | 7.5v3.1 | 0.4% | 2026-04-30 | |
| CVE-2024-13971 | Arbitrary file read and server side request forgery via XML external entities in Lobster_pro | 7.5v3.1 | 0.5% | 2026-04-30 | Fix |
| CVE-2024-54013 | Hanwha Vision QND-8080R authentication bypass | 8.7CNA v4.0 | 0.2% | 2026-04-28 | Fix |
| CVE-2024-54012 | Hanwha Vision QND-8080R command injection | 8.5CNA v4.0 | 0.3% | 2026-04-28 | Fix |
| CVE-2024-54011 | Hanwha Vision QND-8080R missing Error/Exception Handling | 5.3CNA v4.0 | 0.2% | 2026-04-28 | Fix |
| CVE-2024-46636 | NASA EOSDIS MODAPS category parameter search SQL injection | 9.4CISA ADP v3.1 | 0.3% | 2026-04-27 | Exploit code |
| CVE-2024-58344 | Carbon Forum persistent XSS via Forum Name field | 5.1CNA v4.0 | 0.2% | 2026-04-22 | Exploit code |
| CVE-2024-7083 | Email Encoder WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.2% | 2026-04-20 | Fix |
| CVE-2024-58343 | Vision Helpdesk forced browsing | 4.3CNA v3.1 | 0.2% | 2026-04-16 | Fix |
| CVE-2024-10242 | WSO2 API Manager authentication endpoint reflected cross-site scripting | 6.1CNA v3.1 | 0.2% | 2026-04-16 | Fix |
| CVE-2024-8010 | XML external entity injection via Publisher in WSO2 API Manager allows Reading arbitrary files | 3.5CNA v3.1 | 0.3% | 2026-04-16 | Fix |
| CVE-2024-4867 | WSO2 API Manager developer portal cross-site scripting | 5.4CNA v3.1 | 0.2% | 2026-04-16 | Fix |
| CVE-2024-2374 | WSO2 API Manager XML external entity injection | 7.5CNA v3.1 | 0.4% | 2026-04-16 | Fix |
| CVE-2024-53412 | NietThijmen ShoppingCart: Command injection in the connect function | 8.4CISA ADP v3.1 | 0.6% | 2026-04-15 | |
| CVE-2024-33618 | Bosch BVMS resource exhaustion | 7.5CNA v3.1 | 0.5% | 2026-04-15 | Fix |
| CVE-2024-23104 | Fortinet FortiNDR information disclosure | 5.4CNA v3.1 | 0.3% | 2026-04-14 | Fix |
| CVE-2024-1490 | WAGO: Vulnerability in WBM through Open VPN | 7.2CNA v3.1 | 0.7% | 2026-04-09 | |
| CVE-2024-36058 | Koha Library Send Basket SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2026-04-07 | Exploit code |
| CVE-2024-36057 | Koha Library cover image upload command injection | 9.8CISA ADP v3.1 | 1.8% | 2026-04-07 | Exploit code |
| CVE-2024-14032 | Twitch Studio LauncherHelper XPC missing authorization to Root File Write | 8.5CNA v4.0 | 0.2% | 2026-04-06 | |
| CVE-2024-44303 | Apple macOS improper access control | 7.5CISA ADP v3.1 | 0.3% | 2026-04-02 | Fix |
| CVE-2024-44286 | Apple macOS authentication bypass | 7.5CISA ADP v3.1 | 0.3% | 2026-04-02 | Fix |
| CVE-2024-44250 | Apple macOS improper privilege management | 8.2CISA ADP v3.1 | 0.2% | 2026-04-02 | Fix |
| CVE-2024-44219 | Apple macOS insecure permissions | 7.5CISA ADP v3.1 | 0.3% | 2026-04-02 | Fix |
| CVE-2024-40858 | Apple macOS insecure permissions | 7.1CISA ADP v3.1 | 0.2% | 2026-04-02 | Fix |
| CVE-2024-40849 | Apple macOS race condition | 7.5CISA ADP v3.1 | 0.2% | 2026-04-02 | Fix |
| CVE-2024-14034 | Hirschmann HiEOS authentication bypass via HTTP Management module | 9.3CNA v4.0 | 0.5% | 2026-04-02 | Fix |
| CVE-2024-14033 | Hirschmann EagleSDV denial of service via TLS | 8.7CNA v4.0 | 0.4% | 2026-04-02 | Fix |
| CVE-2024-58342 | XenForo open redirect via getDynamicRedirect | 6.1v3.1 | 0.1% | 2026-04-01 | Fix |
| CVE-2024-53828 | Ericsson Packet Core Controller Improper Handling of Syntactically Invalid Structure vulnerability | 5.3CNA v3.1 | 0.4% | 2026-04-01 | Fix |
| CVE-2024-43028 | JeecgBoot component /jmreport/show command injection | 9.8CISA ADP v3.1 | 1.5% | 2026-04-01 | |
| CVE-2024-40489 | JeecgBoot There is an injection | 9.8CISA ADP v3.1 | 0.5% | 2026-04-01 | |
| CVE-2024-14031 | Sereal::Encoder versions from for Perl embeds a vulnerable version of the Zstandard library | 8.1CISA ADP v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2024-14030 | Sereal::Decoder versions from for Perl embeds a vulnerable version of the Zstandard library | 8.1CISA ADP v3.1 | 0.4% | 2026-03-31 | Fix |
| CVE-2024-14028 | Softing smartLink HW-DP use-after-free | 6.5CNA v3.1 | 0.2% | 2026-03-27 | Fix |
| CVE-2024-11604 | OpenText IDM Driver and Extensions insertion of sensitive information into log file | 7.3CNA v4.0 | 0.1% | 2026-03-27 | Fix |
| CVE-2024-58341 | OpenCart Core SQL injection via search parameter | 8.2v3.1 | 0.3% | 2026-03-25 | Exploit codeFix |
| CVE-2024-51348 | BS Producten Petcam P2P API service stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2026-03-25 | |
| CVE-2024-51347 | LSC Smart Indoor IP Camera ONVIF configuration interface buffer overflow | 7.2CISA ADP v3.1 | 0.3% | 2026-03-25 | |
| CVE-2024-51346 | Eufy HomeBase 2 cryptographic scheme information disclosure | 7.7CISA ADP v3.1 | 0.1% | 2026-03-25 | |
| CVE-2024-51226 | PHPGurukul Vehicle Record Management System stored cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2026-03-23 | |
| CVE-2024-51225 | PHPGurukul Vehicle Record Management System stored cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2026-03-23 | |
| CVE-2024-51224 | PHPGurukul Vehicle Record Management System component /admin/edit-vehicle.php cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2026-03-23 | |
| CVE-2024-51223 | PHPGurukul Vehicle Record Management System component /admin/profile.php stored cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2026-03-23 | |
| CVE-2024-51222 | PHPGurukul Vehicle Record Management System component /admin/profile.php stored cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2026-03-23 | |
| CVE-2024-46879 | Tiki POST request data zipPath reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2026-03-23 | Exploit codeFix |
| CVE-2024-46878 | Tiki page parameter cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2026-03-23 | Fix |
| CVE-2024-13785 | reputeinfosystems ARForms shortcode handler code injection | 5.6CNA v3.1 | 0.3% | 2026-03-21 | Fix |
| CVE-2024-44722 | Anolis Sysak code injection | 9.8CISA ADP v3.1 | 0.5% | 2026-03-20 | |
| CVE-2024-32537 | Flash Video Player WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.1% | 2026-03-20 | |
| CVE-2024-31119 | Download Special Box for Content WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2026-03-20 | |
| CVE-2024-42210 | HCL Unica Marketing Operations is affected by a stored cross-site scripting (XSS) | 7.6CNA v3.1 | 0.2% | 2026-03-19 | Fix |
| CVE-2024-14026 | QNAP QTS and QuTS hero OS command injection | 2.0CNA v4.0 | 0.6% | 2026-03-11 | Fix |
| CVE-2024-14025 | QNAP Video Station SQL injection | 0.1CNA v4.0 | 0.1% | 2026-03-11 | Fix |
| CVE-2024-14024 | QNAP Video Station improper certificate validation | 0.1CNA v4.0 | 0.1% | 2026-03-11 | Fix |
| CVE-2024-14027 | Linux kernel fremovexattr error path memory leak | 5.5NVD v3.1 | 0.2% | 2026-03-09 | Exploit codeFix |
| CVE-2024-35644 | Preferred Languages WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2026-03-06 | Fix |
| CVE-2024-57854 | Net::NSCA::Client versions for Perl uses a poor random number generator | 9.1CISA ADP v3.1 | 0.4% | 2026-03-05 | |
| CVE-2024-43035 | Fonoster is vulnerable to directory traversal | 5.8CNA v3.1 | 2.5% | 2026-03-05 | Exploit codeFix |
| CVE-2024-55027 | Weintek Cmt-3072xh2 cleartext storage of sensitive information | 7.5CISA ADP v3.1 | 0.2% | 2026-03-03 | |
| CVE-2024-55026 | Weintek Cmt-3072xh2 plaintext password storage | 9.8v3.1 | 0.3% | 2026-03-03 | |
| CVE-2024-55025 | Weintek Cmt-3072xh2 improper access control | 6.5CISA ADP v3.1 | 0.3% | 2026-03-03 | |
| CVE-2024-55024 | Weintek Cmt-3072xh2 authorization mechanism authentication bypass | 9.8v3.1 | 0.4% | 2026-03-03 | |
| CVE-2024-55023 | Weintek Cmt-3072xh2 hard-coded credentials | 5.3CISA ADP v3.1 | 0.2% | 2026-03-03 | |
| CVE-2024-55022 | Weintek Cmt-3072xh2 code injection | 8.8CISA ADP v3.1 | 1.3% | 2026-03-03 | |
| CVE-2024-55021 | Weintek Cmt-3072xh2 OS command injection | 7.5v3.1 | 0.3% | 2026-03-03 | |
| CVE-2024-55020 | Weintek Cmt-3072xh2 DHCP activation feature command injection | 9.8CISA ADP v3.1 | 1.7% | 2026-03-03 | |
| CVE-2024-55019 | Weintek Cmt-3072xh2 arbitrary file read | 7.5v3.1 | 0.3% | 2026-03-03 | |
| CVE-2024-50337 | Chamilo: Potential unauthenticated blind SSRF via openid function | 5.3CNA v3.1 | 0.3% | 2026-03-02 | Fix |
| CVE-2024-47886 | Chamilo: Post-Auth remote code execution | 8.7CNA v4.0 | 0.9% | 2026-03-02 | Fix |
| CVE-2024-43766 | Google Android btm_ble_sec.cc information disclosure | 6.5CISA ADP v3.1 | 0.1% | 2026-03-02 | Fix |
| CVE-2024-31328 | Google Android BroadcastController.java privilege escalation | 8.8CISA ADP v3.1 | 0.1% | 2026-03-02 | Fix |
| CVE-2024-10938 | OVRI Payment Malicious .htaccess directive | 6.5CNA v3.1 | 0.3% | 2026-02-27 | |
| CVE-2024-58041 | Smolder versions for Perl uses insecure rand function for cryptographic functions | 9.1CISA ADP v3.1 | 0.4% | 2026-02-24 | |
| CVE-2024-56373 | Apache Airflow: SSTI to code execution in Airflow through Shared DB Information | 8.4CISA ADP v3.1 | 1.1% | 2026-02-24 | Fix |
| CVE-2024-48928 | Piwigo's secret key can be brute forced | 2.7CNA v4.0 | 0.3% | 2026-02-24 | Fix |
| CVE-2024-1524 | WSO2 API Manager and Identity Server authentication bypass by spoofing | 7.7CNA v3.1 | 0.3% | 2026-02-24 | Fix |
| CVE-2024-56208 | NewsMash WordPress theme cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2026-02-20 | Fix |
| CVE-2024-54222 | Seraphinite Accelerator WordPress plugin authenticated sensitive data exposure | 4.3CISA ADP v3.1 | 0.3% | 2026-02-20 | Fix |
| CVE-2024-52387 | Master Addons WordPress plugin cross-site scripting (XSS) | 5.9CISA ADP v3.1 | 0.2% | 2026-02-20 | Fix |
| CVE-2024-51915 | LiteSpeed Cache WordPress plugin cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2026-02-20 | Fix |
| CVE-2024-50555 | Elementor Website Builder WordPress plugin cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2026-02-20 | Fix |
| CVE-2024-50452 | Nexter Blocks WordPress plugin cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2026-02-20 | Fix |
| CVE-2024-43228 | SecuPress Free WordPress plugin broken access control | 5.3CISA ADP v3.1 | 0.3% | 2026-02-20 | Fix |
| CVE-2024-34438 | Shared Files WordPress plugin broken access control | 5.3CISA ADP v3.1 | 0.3% | 2026-02-20 | Fix |
| CVE-2024-55271 | PHPGurukul Gym Management System cross-site request forgery | 3.5CISA ADP v3.1 | 0.2% | 2026-02-17 | |
| CVE-2024-55270 | PHPGurukul Student Management System SQL injection | 8.8CISA ADP v3.1 | 0.4% | 2026-02-17 | |
| CVE-2024-43178 | IBM Concert weak cryptographic algorithm | 5.9CNA v3.1 | 0.1% | 2026-02-17 | Fix |
| CVE-2024-31118 | SP Project and Document Manager WordPress plugin broken access control to XSS | 6.5CNA v3.1 | 0.2% | 2026-02-17 | |
| CVE-2024-21961 | AMD EPYC™ 7002 Series Processors memory corruption | 6.0CNA v4.0 | 0.3% | 2026-02-13 | |
| CVE-2024-36319 | Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system. | 6.3CNA v4.0 | 0.1% | 2026-02-12 | |
| CVE-2024-56808 | QNAP Media Streaming add-on command injection | 2.0CNA v4.0 | 0.6% | 2026-02-11 | Fix |
| CVE-2024-56807 | QNAP Media Streaming add-on out-of-bounds read | 1.7CNA v4.0 | 0.1% | 2026-02-11 | Fix |
| CVE-2024-50620 | Cipplanner Cipace unrestricted file upload | 8.8CISA ADP v3.1 | 0.3% | 2026-02-11 | Fix |
| CVE-2024-50619 | Cipplanner Cipace improper privilege management | 8.8CISA ADP v3.1 | 0.2% | 2026-02-11 | Fix |
| CVE-2024-50618 | Cipplanner Cipace Authentication component single-factor authentication | 4.3v3.1 | 0.2% | 2026-02-11 | Fix |
| CVE-2024-50617 | Cipplanner Cipace improper authorization | 7.5CISA ADP v3.1 | 0.2% | 2026-02-11 | Fix |
| CVE-2024-36324 | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics improper input validation | 8.8CNA v3.1 | 0.2% | 2026-02-11 | |
| CVE-2024-36320 | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics integer overflow | 7.0CNA v4.0 | 0.1% | 2026-02-11 | |
| CVE-2024-36316 | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics integer overflow | 5.5CNA v3.1 | 0.2% | 2026-02-11 | |
| CVE-2024-26480 | Statping-ng information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2026-02-11 | |
| CVE-2024-26479 | Statping-ng command execution | 5.3CISA ADP v3.1 | 0.6% | 2026-02-11 | |
| CVE-2024-26478 | Statping-ng information disclosure | 5.3CISA ADP v3.1 | 0.4% | 2026-02-11 | |
| CVE-2024-26477 | Statping-ng information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2026-02-11 | |
| CVE-2024-54192 | An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpedit_dlt_getplugin function at src/tcpedit/plugins/dlt_utils.c. | 5.5CISA ADP v3.1 | 0.1% | 2026-02-10 | |
| CVE-2024-52334 | Siemens syngo.plaza VB30E weak password encoding | 6.3CNA v4.0 | 0.3% | 2026-02-10 | |
| CVE-2024-36355 | AMD EPYC™ 9004 Series Processors SMM handler improper input validation | 7.0CNA v4.0 | 0.2% | 2026-02-10 | |
| CVE-2024-36311 | A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability. | 4.6CNA v4.0 | 0.1% | 2026-02-10 | |
| CVE-2024-36310 | AMD EPYC™ 9004 Series Processors SMM communications buffer improper input validation | 4.6CNA v4.0 | 0.2% | 2026-02-10 | |
| CVE-2024-21953 | AMD EPYC™ 9004 Series Processors IOMMU improper input validation | 5.9CNA v4.0 | 0.2% | 2026-02-10 | |
| CVE-2024-51451 | IBM Concert HTTP header injection | 6.5CNA v3.1 | 0.2% | 2026-02-04 | Fix |
| CVE-2024-43181 | IBM Concert insufficient session expiration | 6.3CNA v3.1 | 0.3% | 2026-02-04 | Fix |
| CVE-2024-40685 | IBM Operations Analytics Log Analysis is affected by CSRF Token Replay Attack | 4.3CNA v3.1 | 0.1% | 2026-02-04 | Fix |
| CVE-2024-39724 | IBM Db2 Big SQL denial of service | 5.3CNA v3.1 | 0.3% | 2026-02-04 | Fix |
| CVE-2024-54263 | Spirit Framework WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.4% | 2026-02-02 | |
| CVE-2024-5986 | Remote arbitrary file write with arbitrary Data in h2oai/h2o-3 | 9.1CNA v3.0 | 0.7% | 2026-02-02 | |
| CVE-2024-5386 | Account Hijacking via password reset token leak in lunary-ai/Lunary | 8.8NVD v3.1 | 0.5% | 2026-02-02 | Fix |
| CVE-2024-4147 | Insufficient access control in lunary-ai/Lunary | 6.5NVD v3.1 | 0.4% | 2026-02-02 | Fix |
| CVE-2024-2356 | Remote code execution due to LFI in /reinstall_extension in parisneo/lollms-webui | 9.6CNA v3.0 | 0.9% | 2026-02-02 | Fix |
| CVE-2024-9432 | Cleartext storage of sensitive information vulnerability has been discovered in OpenText™ Vertica | 6.9CNA v4.0 | 0.1% | 2026-01-30 | |
| CVE-2024-4027 | Red Hat build of Apicurio Registry 2 Undertow Servlets vulnerable to remote DoS | 7.5CNA v3.1 | 0.4% | 2026-01-30 | Fix |
| CVE-2024-11976 | BuddyPress WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2026-01-23 | Fix |
| CVE-2024-54556 | Apple iOS and iPadOS improper access control | 2.4CISA ADP v3.1 | 0.2% | 2026-01-16 | Fix |
| CVE-2024-44238 | Apple macOS memory corruption | 7.8CISA ADP v3.1 | 0.2% | 2026-01-16 | Fix |
| CVE-2024-44210 | Apple macOS improper access control | 3.3CISA ADP v3.1 | 0.2% | 2026-01-16 | Fix |
| CVE-2024-48077 | emqx nanomq deadlock | 7.5CISA ADP v3.1 | 0.3% | 2026-01-15 | |
| CVE-2024-54855 | Fabricators Vanilla OS Core Image hard-coded cryptographic key | 6.4v3.1 | 0.3% | 2026-01-13 | |
| CVE-2024-58340 | LangChain MRKLOutputParser ReDoS | 7.5v3.1 | 0.5% | 2026-01-12 | Fix |
| CVE-2024-58339 | LlamaIndex VannaQueryEngine SQL Execution allows resource exhaustion | 7.5v3.1 | 0.6% | 2026-01-12 | Fix |
| CVE-2024-14021 | LlamaIndex BGEM3Index unsafe deserialization | 7.8v3.1 | 0.3% | 2026-01-12 | Fix |
| CVE-2024-14020 | carboneio carbone Formatter input.js prototype pollution | 2.3CNA v4.0 | 0.3% | 2026-01-07 | Fix |
| CVE-2024-31088 | AdsPlace'r Ad Manager, Inserter, AdSense Ads WordPress plugin cross-site scripting (XSS) | 6.5CISA ADP v3.1 | 0.2% | 2026-01-06 | |
| CVE-2024-30547 | Header Image Slider WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2026-01-06 | |
| CVE-2024-53735 | iPhone Webclip Manager WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2026-01-05 | |
| CVE-2024-30516 | Booking Package WordPress plugin Price manipulation vulnerability | 7.5CNA v3.1 | 0.3% | 2026-01-05 | Fix |
| CVE-2024-30461 | Tumult Hype Animations WordPress plugin CSRF to XSS | 7.1CNA v3.1 | 0.2% | 2026-01-05 | Fix |
| CVE-2024-23511 | The Plus Addons for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-01-05 | Fix |
| CVE-2024-55374 | Vanderbilt REDCap observable discrepancy | 5.3CISA ADP v3.1 | 0.3% | 2026-01-02 | Exploit code |
| CVE-2024-58338 | Anevia Flamingo XL Remote Root Jailbreak via Traceroute command | 10.0v3.1 | 0.8% | 2025-12-30 | Exploit code |
| CVE-2024-58337 | Akuvox Smart Intercom S539 improper access control via ServicesHTTPAPI | 4.3NVD v3.1 | 0.2% | 2025-12-30 | |
| CVE-2024-58336 | Akuvox Smart Intercom S539 Unauthenticated Video Stream Disclosure | 5.3NVD v3.1 | 0.4% | 2025-12-30 | |
| CVE-2024-58315 | Tosibox Key Service local privilege escalation via unquoted service path | 7.8v3.1 | 0.2% | 2025-12-30 | |
| CVE-2024-30855 | DedeCMS cross-site request forgery | 8.8CISA ADP v3.1 | 0.2% | 2025-12-29 | |
| CVE-2024-27480 | Vvvebjs unrestricted file upload | 9.8v3.1 | 0.4% | 2025-12-29 | |
| CVE-2024-25183 | Vvvebjs path traversal | 7.5CISA ADP v3.1 | 0.7% | 2025-12-29 | |
| CVE-2024-25182 | Vvvebjs unrestricted file upload | 9.8v3.1 | 0.4% | 2025-12-29 | |
| CVE-2024-25181 | Vvvebjs server-side request forgery | 9.1CISA ADP v3.1 | 0.3% | 2025-12-29 | |
| CVE-2024-44065 | Magicbug Cloudlog Time-based blind SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2025-12-26 | |
| CVE-2024-42718 | Croogo CMS has a path traversal | 6.5CISA ADP v3.1 | 0.6% | 2025-12-26 | |
| CVE-2024-29720 | Terrainformatica Sciter information disclosure | 5.5v3.1 | 0.2% | 2025-12-26 | |
| CVE-2024-58335 | jcthiele OpenXRechnungToolbox XML external entity injection | 5.0CNA v3.1 | 0.2% | 2025-12-24 | |
| CVE-2024-40317 | Airc Mynet reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-12-24 | |
| CVE-2024-39037 | Airc Mynet SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-12-24 | |
| CVE-2024-35322 | Airc Mynet cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-12-24 | |
| CVE-2024-57521 | RuoYi SqlUtil createTable function SQL injection | 10.0CISA ADP v3.1 | 0.7% | 2025-12-23 | Exploit code |
| CVE-2024-24844 | PowerPack Pro for Elementor WordPress plugin unauthenticated plugin settings reset vulnerability | 7.5CNA v3.1 | 0.3% | 2025-12-23 | Fix |
| CVE-2024-9684 | FreyrSCADA IEC-60870-5-104 denial of service | 7.5CNA v3.1 | 0.4% | 2025-12-23 | |
| CVE-2024-35321 | Airc Mynet cross-site scripting | 4.3CISA ADP v3.1 | 0.3% | 2025-12-22 | |
| CVE-2024-27708 | Airc Mynet airc.pt/solucoes-servicos.solucoes injection | 9.6CISA ADP v3.1 | 0.6% | 2025-12-22 | |
| CVE-2024-25814 | Airc Mynet cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-12-22 | |
| CVE-2024-25812 | Airc Mynet cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-12-22 | |
| CVE-2024-49587 | Glutton V1 endpoints missing authentication | 9.1CNA v3.1 | 0.3% | 2025-12-19 | |
| CVE-2024-58323 | Kentico Xperience Checkbox form component stored XSS | 5.4v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2024-58322 | Kentico Xperience Shipping options stored XSS | 5.4v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2024-58321 | Kentico Xperience Form Validation stored XSS | 5.4v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2024-58320 | Kentico Xperience Authentication information disclosure | 6.9CNA v4.0 | 0.3% | 2025-12-18 | Fix |
| CVE-2024-58319 | Kentico Xperience Pages Dashboard widget reflected XSS | 6.1v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2024-58318 | Kentico Xperience Rich Text Editor stored XSS | 6.1v3.1 | 0.2% | 2025-12-18 | Fix |
| CVE-2024-58317 | Kentico Xperience Cookie Security Configuration | 6.9CNA v4.0 | 0.2% | 2025-12-18 | Fix |
| CVE-2024-46062 | conda Miniconda3 incorrect permission assignment | 7.8CISA ADP v3.1 | 0.2% | 2025-12-17 | Fix |
| CVE-2024-46060 | Anaconda3 incorrect permission assignment | 7.8CISA ADP v3.1 | 0.2% | 2025-12-17 | Fix |
| CVE-2024-29371 | JOSE4J is vulnerable to DoS via compressed JWE content | 7.5CISA ADP v3.1 | 0.3% | 2025-12-17 | Fix |
| CVE-2024-29370 | python-jose decompression bomb | 5.3CISA ADP v3.1 | 0.2% | 2025-12-17 | |
| CVE-2024-44599 | Fntsoftware Fnt Command unrestricted file upload | 8.3CISA ADP v3.1 | 0.5% | 2025-12-15 | |
| CVE-2024-44598 | Fntsoftware Fnt Command unrestricted file upload | 8.8CISA ADP v3.1 | 0.4% | 2025-12-15 | |
| CVE-2024-58316 | PuneethReddyHC online-shopping-system-advanced Online Shopping System Advanced SQL injection | 8.7CNA v4.0 | 0.6% | 2025-12-12 | Exploit code |
| CVE-2024-58314 | ATCOM Technology 100M IP Phones atcom.x.x authenticated command injection via Web Configuration CGI | 8.7CNA v4.0 | 1.6% | 2025-12-12 | Exploit code |
| CVE-2024-58311 | Dormakaba Saflok System 6000 Key Generation cryptographic weakness | 8.7CNA v4.0 | 0.4% | 2025-12-12 | Exploit code |
| CVE-2024-58305 | WonderCMS cross-site scripting remote code execution via Module Installation | 8.6CNA v4.0 | 0.4% | 2025-12-12 | Exploit code |
| CVE-2024-58299 | PCMan FTP Server remote buffer overflow via pwd command | 9.3CNA v4.0 | 0.8% | 2025-12-12 | Exploit code |
| CVE-2024-14010 | Typora OS command injection via Export PDF Preferences | 8.5CNA v4.0 | 1.2% | 2025-12-12 | Exploit code |
| CVE-2024-58313 | xbtitFM insecure file upload in file_hosting feature | 7.2v3.1 | 0.6% | 2025-12-11 | Exploit code |
| CVE-2024-58312 | xbtitFM unauthenticated path traversal in nfogen.php | 7.5v3.1 | 1.2% | 2025-12-11 | Exploit code |
| CVE-2024-58310 | Apc Network Management Card 4 path traversal via directory traversal | 8.7CNA v4.0 | 0.9% | 2025-12-11 | Exploit code |
| CVE-2024-58309 | xbtitFM unauthenticated SQL injection in shoutedit.php | 9.8v3.1 | 0.6% | 2025-12-11 | Exploit code |
| CVE-2024-58308 | OpenSolution QuickCMS Quick.CMS SQL injection authentication bypass via Admin Login | 9.8v3.1 | 0.7% | 2025-12-11 | Exploit code |
| CVE-2024-58307 | Cszcms authenticated SQL injection via Members view endpoint | 8.8NVD v3.1 | 0.5% | 2025-12-11 | Exploit code |
| CVE-2024-58306 | minaliC denial of service vulnerability via Large GET request | 8.7CNA v4.0 | 0.5% | 2025-12-11 | Exploit code |
| CVE-2024-58304 | SPA-Cart CMS stored cross-site scripting | 5.3CNA v4.0 | 0.3% | 2025-12-11 | Exploit codeFix |
| CVE-2024-58303 | FoF Pretty Mail server side template injection via Email template settings | 8.6CNA v4.0 | 0.5% | 2025-12-11 | Exploit code |
| CVE-2024-58302 | FoF Pretty Mail local file inclusion via Email template settings | 6.9CNA v4.0 | 0.3% | 2025-12-11 | Exploit code |
| CVE-2024-58301 | Purei CMS SQL injection via multiple vulnerable endpoints | 9.3CNA v4.0 | 0.3% | 2025-12-11 | Exploit code |
| CVE-2024-58300 | Siklu MultiHaul TG Series Unauthenticated credential disclosure | 8.7CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58298 | Compuware iStrobe Web Pre-Auth remote code execution via file upload | 9.2CNA v4.0 | 1.0% | 2025-12-11 | Exploit code |
| CVE-2024-58297 | PyroCMS stored cross-site scripting via Admin Redirects | 5.4v3.1 | 0.3% | 2025-12-11 | Exploit code |
| CVE-2024-58296 | CE Phoenix stored cross-site scripting via admin/currencies.php | 5.3CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58295 | ElkArte Forum Authenticated remote code execution via theme upload | 8.6CNA v4.0 | 0.6% | 2025-12-11 | Exploit code |
| CVE-2024-58294 | FreePBX 16 authenticated remote code execution via API module | 8.8v3.1 | 3.6% | 2025-12-11 | Exploit code |
| CVE-2024-58293 | Akaunting server-side template injection via multiple form fields | 8.6CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58292 | XMB Forum persistent cross-site scripting via Admin templates | 5.3CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58291 | Flatboard Authenticated stored cross-site scripting via Forum Information field | 5.3CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58290 | Xhibiter NFT Marketplace SQL injection via Collections endpoint | 9.3CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58289 | Microweber stored cross-site scripting via User Profile fields | 5.4v3.1 | 0.3% | 2025-12-11 | Exploit code |
| CVE-2024-58288 | Genexus Protection Server unquoted service path privilege escalation | 8.7CNA v4.0 | 0.4% | 2025-12-11 | Exploit code |
| CVE-2024-58287 | reNgine authenticated command injection via Scan Engine Configuration | 8.8v3.1 | 3.4% | 2025-12-11 | Exploit code |
| CVE-2024-58286 | dizqueTV remote code execution via FFMPEG Executable Path | 9.3CNA v4.0 | 1.4% | 2025-12-11 | MetasploitExploit code |
| CVE-2024-42197 | HCL Workload Scheduler is vulnerable to plain text storage of a password | 5.5CNA v3.1 | 0.1% | 2025-12-11 | Fix |
| CVE-2024-40593 | Fortinet FortiAnalyzer key management weakness | 5.9CNA v3.1 | 0.1% | 2025-12-11 | Fix |
| CVE-2024-8273 | HYPR Server authentication bypass by spoofing | 7.1CNA v4.0 | 0.3% | 2025-12-11 | Fix |
| CVE-2024-58285 | Chyrp stored cross-site scripting vulnerability via Post Title | 5.4v3.1 | 0.3% | 2025-12-10 | Exploit code |
| CVE-2024-58284 | PopojiCMS remote command execution via Authenticated Metadata settings | 7.2v3.1 | 1.1% | 2025-12-10 | Exploit code |
| CVE-2024-58283 | WBCE CMS remote code execution via Elfinder file upload | 8.8v3.1 | 0.7% | 2025-12-10 | Exploit code |
| CVE-2024-58282 | Serendipity remote code execution via Authenticated Media upload | 7.2v3.1 | 1.0% | 2025-12-10 | Exploit code |
| CVE-2024-58281 | Dotclear remote code execution via authenticated file upload | 8.8v3.1 | 0.9% | 2025-12-10 | Exploit code |
| CVE-2024-58280 | CMSimple remote command execution via Extensions Configuration | 8.8v3.1 | 0.9% | 2025-12-10 | Exploit code |
| CVE-2024-58279 | appRain CMF authenticated remote code execution via Filemanager upload | 8.8v3.1 | 1.0% | 2025-12-10 | Exploit code |
| CVE-2024-2105 | JBL: Improper validation of ICM field in connection requests | 6.5CNA v3.1 | 0.2% | 2025-12-10 | Fix |
| CVE-2024-2104 | JBL: Improper BLE security configurations and lack of authentication on the device's GATT server | 8.8CNA v3.1 | 0.2% | 2025-12-10 | Fix |
| CVE-2024-56840 | Siemens RUGGEDCOM ROX MX5000 injection | 7.5CNA v4.0 | 0.6% | 2025-12-09 | Fix |
| CVE-2024-56839 | Siemens RUGGEDCOM ROX MX5000 injection | 8.6CNA v4.0 | 0.6% | 2025-12-09 | Fix |
| CVE-2024-56838 | Siemens RUGGEDCOM ROX MX5000 injection | 8.6CNA v4.0 | 0.4% | 2025-12-09 | Fix |
| CVE-2024-56837 | Siemens RUGGEDCOM ROX MX5000 command injection | 8.6CNA v4.0 | 0.5% | 2025-12-09 | Fix |
| CVE-2024-56836 | Siemens RUGGEDCOM ROX MX5000 command injection | 7.7CNA v4.0 | 0.4% | 2025-12-09 | Fix |
| CVE-2024-56835 | Siemens RUGGEDCOM ROX MX5000 injection | 8.7CNA v4.0 | 0.5% | 2025-12-09 | Fix |
| CVE-2024-56464 | IBM QRadar SIEM is affected by an information disclosure | 2.7CNA v3.1 | 0.3% | 2025-12-09 | Fix |
| CVE-2024-47570 | Fortinet FortiProxy sensitive information in log files | 6.3CNA v3.1 | 0.4% | 2025-12-09 | Fix |
| CVE-2024-38798 | TianoCore edk2 information disclosure | 5.8CNA v4.0 | 0.1% | 2025-12-09 | Fix |
| CVE-2024-9183 | Time-of-check time-of-use (TOCTOU) race condition in GitLab | 7.7CNA v3.1 | 0.2% | 2025-12-05 | Fix |
| CVE-2024-58278 | IndigoSTAR Software perl2exe arbitrary code execution | 8.5CNA v4.0 | 0.2% | 2025-12-04 | Exploit code |
| CVE-2024-58277 | R Radio Network FM Transmitter System Settings Disclosure | 8.7CNA v4.0 | 0.4% | 2025-12-04 | Exploit codeFix |
| CVE-2024-58276 | Obi08/Enrollment System Obi08-Enrollment System login.php SQL injection | 8.7CNA v4.0 | 0.4% | 2025-12-04 | Exploit code |
| CVE-2024-58275 | Easywall authentication bypass via command injection in /ports-save endpoint | 8.7CNA v4.0 | 1.8% | 2025-12-04 | Exploit code |
| CVE-2024-45539 | Synology DiskStation Manager (DSM) cgi components out-of-bounds write | 7.5CNA v3.1 | 0.5% | 2025-12-04 | Fix |
| CVE-2024-45538 | Synology DiskStation Manager (DSM) WebAPI Framework cross-site request forgery | 9.6CNA v3.1 | 0.4% | 2025-12-04 | Fix |
| CVE-2024-5401 | Synology DiskStation Manager (DSM) WebAPI component improper control of dynamic code | 4.3CNA v3.1 | 0.4% | 2025-12-04 | Fix |
| CVE-2024-32643 | MasaCMS masa CMS vulnerable to authentication bypass with /tag/ | 7.5CNA v3.1 | 0.4% | 2025-12-03 | Fix |
| CVE-2024-32642 | MasaCMS host header poisoning allows account takeover via password reset email | 8.8CNA v3.1 | 0.2% | 2025-12-03 | Fix |
| CVE-2024-32641 | MasaCMS masa CMS vulnerable to Pre-Auth RCE via JSON API | 9.8CNA v3.1 | 12.3% | 2025-12-03 | Emerging ThreatsFix |
| CVE-2024-3884 | Undertow: Outofmemory when parsing form data encoding with application/x-www-form-urlencoded | 7.5CISA ADP v3.1 | 1.4% | 2025-12-03 | Fix |
| CVE-2024-45675 | IBM Informix Dynamic Server authentication bypass | 8.4CNA v3.1 | 0.1% | 2025-12-02 | Fix |
| CVE-2024-56089 | Technitium DNS Server insufficient randomness | 7.5CISA ADP v3.1 | 0.3% | 2025-12-01 | |
| CVE-2024-53684 | Socomec DIRIS Digiware M-70 WEBVIEW-M functionality cross-site request forgery | 8.8v3.1 | 0.2% | 2025-12-01 | Fix |
| CVE-2024-49572 | Socomec DIRIS Digiware M-70 Modbus TCP functionality denial of service | 6.5NVD v3.1 | 0.3% | 2025-12-01 | Fix |
| CVE-2024-48894 | Socomec DIRIS Digiware M-70 WEBVIEW-M functionality cleartext transmission of sensitive information | 7.5v3.1 | 1.1% | 2025-12-01 | Fix |
| CVE-2024-48882 | Socomec DIRIS Digiware M-70 Modbus TCP functionality denial of service | 7.5v3.1 | 0.5% | 2025-12-01 | Fix |
| CVE-2024-45370 | Socomec Easy Config System User profile management functionality authentication bypass | 7.3CNA v3.1 | 0.2% | 2025-12-01 | |
| CVE-2024-39148 | Kerlink Keros code injection | 8.1CISA ADP v3.1 | 0.5% | 2025-12-01 | Fix |
| CVE-2024-32388 | Kerlink Keros resource leak | 5.3CNA v3.1 | 1.2% | 2025-12-01 | Fix |
| CVE-2024-32384 | Kerlink Keros cleartext transmission of sensitive information | 7.4v3.1 | 0.2% | 2025-12-01 | Fix |
| CVE-2024-5540 | ALC WebCTRL Carrier i-Vu reflected cross-site scripting | 6.9CNA v4.0 | 0.3% | 2025-11-27 | Fix |
| CVE-2024-5539 | ALC WebCTRL Carrier i-Vu Access Control Bypass | 9.2CNA v4.0 | 0.3% | 2025-11-27 | |
| CVE-2024-47856 | RSA Authentication Agent For Windows relative path traversal | 9.8CISA ADP v3.1 | 0.5% | 2025-11-24 | Fix |
| CVE-2024-14015 | Studiocart reflected cross-site scripting | 7.1CISA ADP v3.1 | 0.4% | 2025-11-24 | Nuclei |
| CVE-2024-14007 | TVT NVMS-9000 Unauthenticated Administrative Queries and information disclosure | 8.7CNA v4.0 | 0.9% | 2025-11-24 | Emerging ThreatsFix |
| CVE-2024-21923 | AMD StoreMI™ incorrect default permissions | 7.3CNA v3.1 | 0.1% | 2025-11-23 | |
| CVE-2024-21922 | AMD StoreMI™ DLL hijacking | 7.3CNA v3.1 | 0.1% | 2025-11-23 | |
| CVE-2024-8528 | ALC WebCTRL Carrier i-Vu reflected XSS due to unsanitized parameter | 5.4CNA v4.0 | 0.1% | 2025-11-19 | Fix |
| CVE-2024-8527 | ALC WebCTRL Carrier i-Vu open redirect via URL parameter | 8.6CNA v4.0 | 0.2% | 2025-11-19 | Fix |
| CVE-2024-46336 | Kashipara School Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-46335 | PHPGurukul Complaint Management System cross-site scripting | 4.6CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-46334 | Kashipara School Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44664 | PHPGurukul Online Shopping Portal SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44663 | PHPGurukul Online Shopping Portal SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44662 | PHPGurukul Online Shopping Portal SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44661 | PHPGurukul Online Shopping Portal cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44660 | PHPGurukul Online Shopping Portal SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44659 | PHPGurukul Online Shopping Portal SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2025-11-17 | |
| CVE-2024-44658 | PHPGurukul Complaint Management System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44657 | PHPGurukul Complaint Management System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44655 | PHPGurukul Complaint Management System cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44654 | PHPGurukul Complaint Management System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44653 | Kashipara E-Commerce Website SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44652 | Kashipara E-Commerce Website SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44651 | Kashipara E-Commerce Website SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44648 | PHPGurukul Small CRM SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44647 | PHPGurukul Small CRM cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44644 | PHPGurukul Small CRM SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-44641 | PHPGurukul Small CRM SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-17 | |
| CVE-2024-55016 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44640 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44639 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44636 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44635 | PHPGurukul Student Record System cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44633 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44632 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-44630 | PHPGurukul Student Record System SQL injection | 6.5CISA ADP v3.1 | 0.2% | 2025-11-14 | |
| CVE-2024-42749 | Alto Cms cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-11-14 | |
| CVE-2024-21635 | Memos Access Tokens Stay Valid after User Password Change | 7.1CNA v4.0 | 0.3% | 2025-11-14 | Fix |
| CVE-2024-13983 | Google Chrome Lens inappropriate implementation | 6.3CISA ADP v3.1 | 0.1% | 2025-11-14 | Fix |
| CVE-2024-13178 | Google Chrome Fullscreen inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2025-11-14 | Fix |
| CVE-2024-11920 | Google Chrome Dawn inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2025-11-14 | Fix |
| CVE-2024-11919 | Google Chrome Intents inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2025-11-14 | Fix |
| CVE-2024-9126 | Google Chrome Internals use-after-free | 7.5CISA ADP v3.1 | 0.2% | 2025-11-14 | Fix |
| CVE-2024-7021 | Google Chrome Autofill inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2025-11-14 | Fix |
| CVE-2024-7017 | Google Chrome DevTools inappropriate implementation | 7.5CISA ADP v3.1 | 0.2% | 2025-11-14 | Fix |
| CVE-2024-48829 | Dell SmartFabric OS10 Software code injection | 6.7CNA v3.1 | 0.2% | 2025-11-12 | Fix |
| CVE-2024-47866 | ceph RGW DoS attack with empty HTTP header in S3 object copy | 7.5CNA v3.1 | 0.5% | 2025-11-12 | Fix |
| CVE-2024-45301 | Mintty Path Conversion improper input validation information disclosure | 5.3CNA v3.1 | 0.3% | 2025-11-12 | Fix |
| CVE-2024-57695 | OPSWAT Outpost Security Suite command injection | 7.7CISA ADP v3.1 | 0.2% | 2025-11-11 | |
| CVE-2024-32014 | Siemens Spectrum Power 4 incorrect permission assignment | 5.6CNA v4.0 | 0.1% | 2025-11-11 | Fix |
| CVE-2024-32011 | Siemens Spectrum Power 4 inclusion of untrusted functionality | 8.7CNA v4.0 | 0.4% | 2025-11-11 | Fix |
| CVE-2024-32010 | Siemens Spectrum Power 4 incorrect permission assignment | 8.5CNA v4.0 | 0.1% | 2025-11-11 | Fix |
| CVE-2024-32009 | Siemens Spectrum Power 4 incorrect privilege assignment | 8.5CNA v4.0 | 0.1% | 2025-11-11 | Fix |
| CVE-2024-32008 | Siemens Spectrum Power 4 incorrect use of privileged APIs | 8.5CNA v4.0 | 0.1% | 2025-11-11 | Fix |
| CVE-2024-47118 | IBM Db2 stack-based buffer overflow | 6.5CNA v3.1 | 0.3% | 2025-11-07 | Fix |
| CVE-2024-25621 | containerd affected by a local privilege escalation via wide permissions on CRI directory | 7.3CNA v3.1 | 0.2% | 2025-11-06 | Fix |
| CVE-2024-12125 | 3scale porta 3scale-porta: Readonly fields not validated server-side | 7.5CNA v3.1 | 0.2% | 2025-11-06 | |
| CVE-2024-56426 | Samsung Exynos 980 out-of-bounds write | 7.5CISA ADP v3.1 | 0.4% | 2025-11-04 | Exploit codeFix |
| CVE-2024-51317 | Netsurf-browser netsurf command injection | 6.5CISA ADP v3.1 | 0.4% | 2025-11-03 | |
| CVE-2024-13998 | Nagios XI API Keys and Hashed Passwords Authenticated information disclosure | 6.5NVD v3.1 | 1.0% | 2025-11-03 | Fix |
| CVE-2024-13997 | Nagios XI privilege escalation via Migrate Server feature to Root on host | 7.2NVD v3.1 | 1.2% | 2025-11-03 | Fix |
| CVE-2024-13992 | Nagios XI XSS via Missing page / 404 | 5.4NVD v3.1 | 0.6% | 2025-10-31 | Fix |
| CVE-2024-58273 | Nagios Log Server LPE from Apache/Backend Shell User to Root | 7.8NVD v3.1 | 0.3% | 2025-10-30 | Fix |
| CVE-2024-14009 | Nagios XI privilege escalation via System Profile | 7.2NVD v3.1 | 1.2% | 2025-10-30 | Fix |
| CVE-2024-14008 | Nagios XI RCE via WinRM Configuration Wizard | 7.2NVD v3.1 | 2.4% | 2025-10-30 | Fix |
| CVE-2024-14006 | Nagios XI host header injection | 6.1NVD v3.1 | 0.5% | 2025-10-30 | Fix |
| CVE-2024-14005 | Nagios XI command injection via Docker Wizard | 8.8NVD v3.1 | 4.0% | 2025-10-30 | Fix |
| CVE-2024-14004 | Nagios XI privilege escalation via NagVis Configuration (nagvis.conf) | 8.8NVD v3.1 | 1.1% | 2025-10-30 | Fix |
| CVE-2024-14003 | Nagios XI RCE via NRDP Server plugins | 9.8NVD v3.1 | 2.3% | 2025-10-30 | Fix |
| CVE-2024-14002 | Nagios XI authenticated local file inclusion via NagVis | 5.5NVD v3.1 | 1.3% | 2025-10-30 | Fix |
| CVE-2024-14001 | Nagios XI XSS via Executive Summary Report | 5.4NVD v3.1 | 0.6% | 2025-10-30 | Fix |
| CVE-2024-14000 | Nagios XI XSS via Capacity Planning Report | 5.4NVD v3.1 | 0.6% | 2025-10-30 | Fix |
| CVE-2024-13999 | Nagios XI AD/LDAP Token Authenticated information disclosure | 9.8NVD v3.1 | 1.9% | 2025-10-30 | Fix |
| CVE-2024-13996 | Nagios XI Session not Invalidated after Password Change | 9.8NVD v3.1 | 1.1% | 2025-10-30 | Fix |
| CVE-2024-13995 | Nagios XI API Keys and Hashed Passwords Authenticated information disclosure | 8.8NVD v3.1 | 1.3% | 2025-10-30 | Fix |
| CVE-2024-13994 | Nagios XI allow Insecure Logins missing authorization | 9.8NVD v3.1 | 0.9% | 2025-10-30 | Fix |
| CVE-2024-13993 | Nagios XI reflected XSS via Login page on Older Browsers | 6.1NVD v3.1 | 0.8% | 2025-10-30 | Fix |
| CVE-2024-58269 | Rancher exposes sensitive information through audit logs | 4.3CNA v3.1 | 0.3% | 2025-10-29 | Fix |
| CVE-2024-45162 | phddns client in Blu-Castle BCUM221E stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2025-10-29 | |
| CVE-2024-45161 | Blu-Castle BCUM221E administrative web GUI cross-site request forgery | 4.6CISA ADP v3.1 | 0.1% | 2025-10-29 | |
| CVE-2024-14012 | Potential privilege escalation in Revenera InstallShield 2023 R1 | 7.3CNA v4.0 | 0.1% | 2025-10-29 | |
| CVE-2024-58274 | Hikvision CSMP iSecure Center OS command injection | 8.3CNA v3.1 | 19.1% | 2025-10-22 | |
| CVE-2024-55568 | Samsung Exynos 980 denial of service | 7.5CISA ADP v3.1 | 0.6% | 2025-10-20 | Fix |
| CVE-2024-31573 | XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets | 4.0CNA v3.1 | 0.3% | 2025-10-17 | Fix |
| CVE-2024-56143 | Strapi allows unauthorized access to Private fields via parms.lookup | 8.2CNA v3.1 | 0.4% | 2025-10-16 | Fix |
| CVE-2024-42192 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage | 5.5CNA v3.1 | 0.2% | 2025-10-16 | Fix |
| CVE-2024-13991 | Huijietong Cloud Video Platform fileDownload arbitrary file read | 8.7CNA v4.0 | 0.5% | 2025-10-15 | |
| CVE-2024-50571 | Fortinet FortiAnalyzer heap-based buffer overflow | 6.5CNA v3.1 | 0.5% | 2025-10-14 | Fix |
| CVE-2024-48891 | Fortinet FortiSOAR on-premise OS command injection | 6.6CNA v3.1 | 0.5% | 2025-10-14 | Fix |
| CVE-2024-47569 | Fortinet FortiMail information disclosure | 4.2CNA v3.1 | 0.5% | 2025-10-14 | Fix |
| CVE-2024-44088 | Apache Geode: Reflected XSS | 6.1CISA ADP v3.1 | 0.7% | 2025-10-14 | Fix |
| CVE-2024-33507 | Fortinet FortiIsolator insufficient session expiration | 7.0CNA v3.1 | 0.4% | 2025-10-14 | Fix |
| CVE-2024-26008 | Fortinet FortiProxy improper check for exceptional conditions | 5.0CNA v3.1 | 0.5% | 2025-10-14 | Fix |
| CVE-2024-56804 | QNAP Video Station SQL injection | 5.3CNA v4.0 | 0.4% | 2025-10-03 | Fix |
| CVE-2024-58267 | Rancher CLI SAML authentication is vulnerable to phishing attacks | 8.0CNA v3.1 | 0.2% | 2025-10-02 | Fix |
| CVE-2024-58260 | Rancher update on users can deny the service to the admin | 7.6CNA v3.1 | 0.5% | 2025-10-02 | Fix |
| CVE-2024-57494 | Neto E-Commerce CMS v.6.313.0 cross-site scripting | 6.5CISA ADP v3.1 | 0.3% | 2025-10-01 | |
| CVE-2024-58040 | Crypt::RandomEncryption for Perl uses insecure rand function during encryption | 9.1CISA ADP v3.1 | 0.2% | 2025-09-30 | |
| CVE-2024-55017 | Corezoid account takeover | 7.5CISA ADP v3.1 | 0.3% | 2025-09-30 | |
| CVE-2024-57412 | SunOS Omnios TCP stack denial of service | 7.5CISA ADP v3.1 | 0.3% | 2025-09-29 | |
| CVE-2024-13150 | SQLi in Fayton Software's fayton.pro ERP | 9.8CNA v3.1 | 0.4% | 2025-09-29 | |
| CVE-2024-5200 | Postie WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.2% | 2025-09-29 | Fix |
| CVE-2024-43192 | IBM Storage TS4500 Library cross-site request forgery | 6.5CNA v3.1 | 0.2% | 2025-09-27 | Fix |
| CVE-2024-48014 | Dell BSAFE Micro Edition Suite out-of-bounds write | 7.5CNA v3.1 | 0.4% | 2025-09-25 | Fix |
| CVE-2024-58241 | Linux kernel Bluetooth HCI device unregistration vulnerability | 7.8CNA v3.1 | 0.1% | 2025-09-24 | Fix |
| CVE-2024-21935 | AMD Instinct™ MI300X Satellite Management controller improper input validation | 5.0CNA v3.1 | 0.2% | 2025-09-23 | |
| CVE-2024-21927 | AMD Instinct™ MI300X Satellite Management controller improper input validation | 5.0CNA v3.1 | 0.3% | 2025-09-23 | |
| CVE-2024-6429 | Content spoofing in multiple WSO2 Products via Error message injection | 4.3CNA v3.1 | 0.2% | 2025-09-23 | Fix |
| CVE-2024-4598 | Information disclosure in multiple WSO2 Products due to Improper Handling in Enrich Mediator | 6.5CNA v3.1 | 0.3% | 2025-09-23 | Fix |
| CVE-2024-13990 | MicroWorld eScan AV Insecure Update Mechanism allows man-in-the-middle Replacement of Updates | 9.3CNA v4.0 | 0.6% | 2025-09-19 | Fix |
| CVE-2024-48851 | ABB FLXEON remote code execution | 7.5CNA v4.0 | 0.5% | 2025-09-18 | Fix |
| CVE-2024-25011 | Ericsson Catalog Manager and Ericsson Order Care exposure of sensitive information | 5.3CNA v3.1 | 0.3% | 2025-09-18 | Fix |
| CVE-2024-13151 | SQLi in ESBI Informatics's Auto Service Software | 9.8CNA v3.1 | 0.4% | 2025-09-18 | Fix |
| CVE-2024-48842 | ABB FLXEON hard-coded passwords | 7.3CNA v4.0 | 0.2% | 2025-09-17 | Fix |
| CVE-2024-13174 | SQLi in E1 Informatics' Web Application | 8.6CNA v3.1 | 0.3% | 2025-09-16 | |
| CVE-2024-13149 | SQLi in Arma Store's Armalife | 9.8CNA v3.1 | 0.4% | 2025-09-16 | |
| CVE-2024-12913 | SQLi in Megatek Communication System's Azora Wireless Network Management | 8.8CNA v3.1 | 0.2% | 2025-09-16 | |
| CVE-2024-12796 | Reflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP | 5.3CNA v3.1 | 0.3% | 2025-09-16 | |
| CVE-2024-12367 | Information disclosure in Vegagrup Software's Vega Master | 8.6CNA v3.1 | 0.3% | 2025-09-16 | |
| CVE-2024-45434 | Opensynergy Blue SDK use-after-free | 9.8CISA ADP v3.1 | 7.3% | 2025-09-12 | |
| CVE-2024-45433 | Opensynergy Blue SDK incorrect control flow | 6.5CISA ADP v3.1 | 0.6% | 2025-09-12 | |
| CVE-2024-45432 | Opensynergy Blue SDK information disclosure | 7.5CISA ADP v3.1 | 0.7% | 2025-09-12 | |
| CVE-2024-45431 | Opensynergy Blue SDK improper input validation | 5.3CISA ADP v3.1 | 5.6% | 2025-09-12 | |
| CVE-2024-47120 | IBM Security Verify Information Queue code execution | 6.4CNA v3.1 | 0.2% | 2025-09-10 | Fix |
| CVE-2024-45671 | IBM Security Verify Information Queue information disclosure | 5.9CNA v3.1 | 0.2% | 2025-09-10 | Fix |
| CVE-2024-45669 | IBM Security Verify Information Queue denial of service | 6.5CNA v3.1 | 0.4% | 2025-09-10 | Fix |
| CVE-2024-45325 | Fortinet FortiDDoS-F OS command injection | 6.5CNA v3.1 | 0.5% | 2025-09-09 | Fix |
| CVE-2024-48341 | Geeeeeeeek Dingfanzu cross-site request forgery | 3.7CISA ADP v3.1 | 0.2% | 2025-09-08 | |
| CVE-2024-36354 | AMD Ryzen™ Threadripper™ 3000 Processors improper input validation | 7.5CNA v3.1 | 0.2% | 2025-09-06 | |
| CVE-2024-36352 | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics improper input validation | 8.4CNA v3.1 | 0.1% | 2025-09-06 | |
| CVE-2024-36346 | AMD Instinct™ MI300A improper input validation | 6.0CNA v3.1 | 0.1% | 2025-09-06 | |
| CVE-2024-36342 | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics GPU driver improper input validation | 8.8CNA v3.1 | 0.2% | 2025-09-06 | Fix |
| CVE-2024-36331 | AMD EPYC™ 9004 Series Processors improper initialization | 3.2CNA v3.1 | 0.2% | 2025-09-06 | Fix |
| CVE-2024-36326 | AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics missing authorization | 8.4CNA v3.1 | 0.1% | 2025-09-06 | |
| CVE-2024-21970 | AMD Ryzen™ Threadripper™ 3000 Processors AND power Management firmware improper input validation | 4.4CNA v3.1 | 0.1% | 2025-09-06 | |
| CVE-2024-21947 | AMD Ryzen™ Threadripper™ 3000 Processors system management mode improper input validation | 7.5CNA v3.1 | 0.1% | 2025-09-06 | |
| CVE-2024-21977 | AMD EPYC™ 7003 Series Processors incomplete cleanup | 3.2CNA v3.1 | 0.2% | 2025-09-05 | |
| CVE-2024-0028 | Google Android Audio service privilege escalation | 5.5CISA ADP v3.1 | 0.1% | 2025-09-05 | Fix |
| CVE-2024-56190 | Google Android wl_cfgscan.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-09-04 | Fix |
| CVE-2024-56189 | Google Android SAEMM_RadioMessageCodec.c out-of-bounds read | 6.5CISA ADP v3.1 | 0.3% | 2025-09-04 | Fix |
| CVE-2024-49739 | Google Android pmr_os.c out-of-bounds write | 4.0CISA ADP v3.1 | 0.1% | 2025-09-04 | Fix |
| CVE-2024-49731 | Google Android apk-versions.txt privilege escalation | 4.0CISA ADP v3.1 | 0.1% | 2025-09-04 | Fix |
| CVE-2024-49714 | Google Android avrc_opt.cc out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-09-04 | Fix |
| CVE-2024-43184 | IBM Jazz Foundation cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-09-04 | Fix |
| CVE-2024-40664 | Google Android AccessibilityFragment.java denial of service | 6.2CISA ADP v3.1 | 0.1% | 2025-09-04 | Fix |
| CVE-2024-34598 | Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store. | 7.7CNA v3.1 | 0.1% | 2025-09-04 | Fix |
| CVE-2024-13073 | XSS in Akinsoft's TaskPano | 4.7CNA v3.1 | 0.3% | 2025-09-04 | |
| CVE-2024-13071 | XSS in Akinsoft's e-Mutabakat | 4.3CNA v3.1 | 0.2% | 2025-09-04 | Fix |
| CVE-2024-43166 | Apache DolphinScheduler incorrect default permissions | 9.8CISA ADP v3.1 | 0.5% | 2025-09-03 | Fix |
| CVE-2024-43115 | Apache DolphinScheduler: Alert Script Attack | 8.8CISA ADP v3.1 | 0.5% | 2025-09-03 | Fix |
| CVE-2024-32444 | RealHomes WordPress theme privilege escalation | 9.8CNA v3.1 | 0.7% | 2025-09-03 | Exploit codeFix |
| CVE-2024-13068 | Host header injection in Akinsoft's LimonDesk | 7.3CNA v3.1 | 0.2% | 2025-09-03 | Fix |
| CVE-2024-13066 | IFrame injection in Akinsoft's LimonDesk | 4.3CNA v3.1 | 0.2% | 2025-09-03 | Fix |
| CVE-2024-13065 | Business logic error in Akinsoft's MyRezzta | 6.3CNA v3.1 | 0.2% | 2025-09-03 | Fix |
| CVE-2024-13064 | XSS in Akinsoft's MyRezzta | 4.3CNA v3.1 | 0.2% | 2025-09-03 | Fix |
| CVE-2024-13063 | IDOR in Akinsoft's MyRezzta | 6.8CNA v3.1 | 0.2% | 2025-09-03 | Fix |
| CVE-2024-58259 | Rancher affected by unauthenticated denial of service | 8.2CNA v3.1 | 0.5% | 2025-09-02 | Fix |
| CVE-2024-52284 | Rancher Fleet Helm Values are stored inside BundleDeployment in plain text | 7.7CNA v3.1 | 0.2% | 2025-09-02 | Fix |
| CVE-2024-51423 | Infor Global Human Resources cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-09-02 | |
| CVE-2024-49730 | Google Android FuseDaemon.cpp out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-09-02 | Fix |
| CVE-2024-49728 | Google Android BluetoothOppSendFileInfo.java information disclosure | 5.5CISA ADP v3.1 | 0.1% | 2025-09-02 | Fix |
| CVE-2024-49722 | Google Android EditUserPhotoController.java information disclosure | 5.5CISA ADP v3.1 | 0.1% | 2025-09-02 | Fix |
| CVE-2024-49720 | Google Android Permissions.java privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2025-09-02 | Fix |
| CVE-2024-48705 | WAVLINK Wl-wn531p3 command injection | 6.5CISA ADP v3.1 | 3.4% | 2025-09-02 | Emerging Threats |
| CVE-2024-40653 | Google Android ConnectionServiceWrapper.java privilege escalation | 7.3CISA ADP v3.1 | 0.1% | 2025-09-02 | Fix |
| CVE-2024-12974 | XSS in Akinsoft's ProKuaför | 4.3CNA v3.1 | 0.2% | 2025-09-02 | Fix |
| CVE-2024-12973 | Host header injection in Akinsoft's OctoCloud | 4.7CNA v3.1 | 0.1% | 2025-09-02 | Fix |
| CVE-2024-12972 | XSS in Akinsoft's OctoCloud | 4.3CNA v3.1 | 0.2% | 2025-09-02 | Fix |
| CVE-2024-28988 | SolarWinds Web Help Desk Java deserialization remote code execution | 9.8CNA v3.1 | 39.4% | 2025-09-01 | Fix |
| CVE-2024-12925 | Host header injection in Akınsoft's QR menu | 7.3CNA v3.1 | 0.2% | 2025-09-01 | Fix |
| CVE-2024-12924 | Open redirect in Akınsoft's QR menu | 6.3CNA v3.1 | 0.2% | 2025-09-01 | Fix |
| CVE-2024-12914 | XSS in Akınsoft's QR menu | 4.3CNA v3.1 | 0.2% | 2025-09-01 | Fix |
| CVE-2024-32832 | Login with Phone Number WordPress plugin broken access control | 9.8CNA v3.1 | 0.4% | 2025-08-31 | Fix |
| CVE-2024-32589 | Barcode Scanner and Inventory manager WordPress plugin broken access control to XSS | 7.1CNA v3.1 | 0.2% | 2025-08-31 | Fix |
| CVE-2024-54568 | Apple macOS buffer overflow | 4.3CISA ADP v3.1 | 0.2% | 2025-08-29 | Fix |
| CVE-2024-54554 | Apple macOS link following | 5.5CISA ADP v3.1 | 0.2% | 2025-08-29 | Fix |
| CVE-2024-46917 | Diebold Nixdorf Vynamic Security Suite missing integrity check | 8.1CISA ADP v3.1 | 0.2% | 2025-08-29 | |
| CVE-2024-46916 | Diebold Nixdorf Vynamic Security Suite improper privilege management | 8.1CISA ADP v3.1 | 0.4% | 2025-08-29 | |
| CVE-2024-46484 | TRENDnet Tv-ip410 OS command injection | 9.8CISA ADP v3.1 | 1.1% | 2025-08-29 | |
| CVE-2024-44271 | Apple macOS improper access control | 3.3CISA ADP v3.1 | 0.1% | 2025-08-29 | Fix |
| CVE-2024-13987 | Synology RADIUS Server cross-site scripting | 5.9CNA v3.1 | 0.3% | 2025-08-29 | Fix |
| CVE-2024-13342 | Booster for WooCommerce WordPress plugin unauthenticated double Extension arbitrary file upload | 9.8v3.1 | 0.7% | 2025-08-29 | Fix |
| CVE-2024-12923 | QNAP Photo Station cross-site scripting | 2.0CNA v4.0 | 0.2% | 2025-08-29 | Fix |
| CVE-2024-58240 | Linux kernel TLS decryption use-after-free | 9.8CNA v3.1 | 0.3% | 2025-08-28 | Fix |
| CVE-2024-49790 | IBM Watson Studio on Cloud Pak for Data cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-08-28 | Fix |
| CVE-2024-48908 | lychee-action vulnerable to arbitrary code injection in composite action | 6.9CNA v4.0 | 0.4% | 2025-08-28 | Fix |
| CVE-2024-13986 | Nagios XI authenticated arbitrary file upload path traversal RCE | 8.8v3.1 | 1.7% | 2025-08-28 | Fix |
| CVE-2024-13807 | Xagio SEO WordPress plugin unauthenticated sensitive information exposure | 7.5CNA v3.1 | 0.4% | 2025-08-28 | Fix |
| CVE-2024-9648 | WP ULike Pro WordPress plugin unauthenticated limited arbitrary file upload | 6.1CNA v3.1 | 0.2% | 2025-08-28 | Fix |
| CVE-2024-37777 | Zoneland O2OA code injection | 8.8CISA ADP v3.1 | 0.5% | 2025-08-27 | |
| CVE-2024-13985 | Dahua EIMS capture_handle.action RCE | 10.0CNA v4.0 | 15.1% | 2025-08-27 | NucleiExploit codeFix |
| CVE-2024-13984 | Qi'anxin TianQing Management Center rptsvr arbitrary file upload | 10.0CNA v4.0 | 0.8% | 2025-08-27 | |
| CVE-2024-13982 | SPON IP Network Intercom System rj_get_token.php arbitrary file read | 8.7CNA v4.0 | 1.1% | 2025-08-27 | |
| CVE-2024-13981 | LiveBos UploadFile.do arbitrary file upload | 10.0CNA v4.0 | 0.9% | 2025-08-27 | |
| CVE-2024-13980 | H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE | 10.0CNA v4.0 | 1.0% | 2025-08-27 | |
| CVE-2024-13979 | St. Joe ERP System SingleRowQueryConverter SQL injection | 9.8v3.1 | 3.1% | 2025-08-27 | Nuclei |
| CVE-2024-49740 | Google Android multiple locations crash | 5.5CISA ADP v3.1 | 0.1% | 2025-08-26 | Fix |
| CVE-2024-47853 | Mahara improper privilege management | 8.8v3.1 | 0.3% | 2025-08-26 | Fix |
| CVE-2024-47192 | Mahara download without integrity check | 5.3CISA ADP v3.1 | 0.2% | 2025-08-26 | Fix |
| CVE-2024-45753 | Mahara cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-26 | Fix |
| CVE-2024-39335 | Mahara information disclosure | 9.1CISA ADP v3.1 | 0.3% | 2025-08-26 | Fix |
| CVE-2024-35203 | Mahara cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-26 | Fix |
| CVE-2024-8860 | Tourfic WordPress plugin missing authorization in Multiple Functions | 4.3CNA v3.1 | 0.3% | 2025-08-26 | Fix |
| CVE-2024-46413 | getrebuild rebuild server-side request forgery | 5.1CISA ADP v3.1 | 0.3% | 2025-08-25 | |
| CVE-2024-46412 | Rebuild prehandle function authentication bypass | 6.5CISA ADP v3.1 | 0.4% | 2025-08-25 | |
| CVE-2024-39923 | Mahara cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-25 | Fix |
| CVE-2024-58239 | Linux kernel TLS record processing vulnerability | 8.2CNA v3.1 | 0.3% | 2025-08-22 | Exploit codeFix |
| CVE-2024-56179 | MindManager file attachment handling path traversal | 7.8CISA ADP v3.1 | 0.4% | 2025-08-22 | |
| CVE-2024-53499 | JEEWMS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-08-22 | |
| CVE-2024-53496 | WinterChenS my-site improper access control | 9.8CISA ADP v3.1 | 0.6% | 2025-08-22 | |
| CVE-2024-53494 | SpringBootBlog preHandle authentication filter improper access control | 7.5CISA ADP v3.1 | 0.4% | 2025-08-22 | |
| CVE-2024-52786 | anji-plus AJ-Report up to v1.4.2 authentication bypass | 9.8CISA ADP v3.1 | 0.8% | 2025-08-22 | |
| CVE-2024-50645 | MallChat authentication bypass | 9.8CISA ADP v3.1 | 0.7% | 2025-08-22 | |
| CVE-2024-50644 | zhisheng17 blog authentication bypass | 9.8CISA ADP v3.1 | 0.5% | 2025-08-22 | |
| CVE-2024-48988 | Apache StreamPark: SQL injection | 7.6CISA ADP v3.1 | 0.6% | 2025-08-22 | Fix |
| CVE-2024-50641 | PandoraNext-TokensTool v0.6.8 and authentication bypass | 8.1CISA ADP v3.1 | 0.4% | 2025-08-21 | |
| CVE-2024-45438 | TitanHQ SpamTitan Email Security Gateway quarantine.php missing authentication | 9.1CISA ADP v3.1 | 0.6% | 2025-08-21 | |
| CVE-2024-57491 | jobx up to v1.0.1-RELEASE authentication bypass | 8.8CISA ADP v3.1 | 0.3% | 2025-08-20 | |
| CVE-2024-57157 | Jantent improper access control | 9.8CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2024-57155 | radar improper access control | 9.8CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2024-57154 | dts-shop /admin/auth/index authentication bypass | 9.8CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2024-57152 | WinterChenS my-site improper access control | 7.5CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2024-53495 | WinterChenS my-site improper access control | 7.5CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2024-50640 | jeewx-boot preHandle function authentication bypass | 9.8CISA ADP v3.1 | 0.5% | 2025-08-20 | |
| CVE-2024-39954 | Apache EventMesh Runtime: SSRF | 6.3CISA ADP v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2024-12223 | Stored cross-site scripting (XSS) in Nutanix Prism Central | 9.3CNA v4.0 | 0.3% | 2025-08-20 | Fix |
| CVE-2024-45062 | OpenPrinting ippusbxd stack-based buffer overflow | 6.8v3.1 | 0.4% | 2025-08-19 | |
| CVE-2024-44373 | AllSky v2023.05.01 path traversal | 9.8CISA ADP v3.1 | 1.2% | 2025-08-19 | |
| CVE-2024-49827 | IBM Concert Software information disclosure | 3.7CNA v3.1 | 0.2% | 2025-08-18 | Fix |
| CVE-2024-12612 | School Management System for Wordpress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 0.4% | 2025-08-16 | |
| CVE-2024-12575 | Poll Maker WordPress plugin information disclosure | 5.3CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2024-8393 | Woocommerce Blocks Woolook WordPress plugin authenticated (Admin+) local file inclusion | 6.6CNA v3.1 | 0.8% | 2025-08-16 | |
| CVE-2024-53946 | KuWFi 4G LTE AC900 router web management interface cross-site request forgery | 8.8CISA ADP v3.1 | 0.6% | 2025-08-14 | |
| CVE-2024-53945 | KuWFi 4G AC900 LTE Router API endpoints command injection | 8.8CISA ADP v3.1 | 23.2% | 2025-08-14 | Emerging Threats |
| CVE-2024-37945 | WPBITS Addons For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2024-7402 | Netskope Client Configuration tampering with Local MITM | 7.0CNA v4.0 | 0.1% | 2025-08-14 | Fix |
| CVE-2024-12303 | Incorrect privilege assignment in GitLab | 6.7CNA v3.1 | 0.4% | 2025-08-13 | Fix |
| CVE-2024-10219 | Incorrect authorization in GitLab | 6.5CNA v3.1 | 0.4% | 2025-08-13 | Fix |
| CVE-2024-5477 | Certain HP PC Products privilege escalation | 7.3CNA v4.0 | 0.2% | 2025-08-13 | |
| CVE-2024-54678 | Siemens SIMATIC PCS neo deserialization of untrusted data | 8.6CNA v4.0 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-52964 | Fortinet FortiManager path traversal | 5.2CNA v3.1 | 0.6% | 2025-08-12 | Fix |
| CVE-2024-52504 | Siemens SIPROTEC 4 6MD61 improper check for exceptional conditions | 8.7CNA v4.0 | 0.4% | 2025-08-12 | Fix |
| CVE-2024-48892 | Fortinet FortiSOAR relative path traversal | 6.4CNA v3.1 | 0.4% | 2025-08-12 | Fix |
| CVE-2024-41986 | Siemens SmartClient modules Opcenter QL Home (SC) weak cryptographic algorithm | 6.1CNA v4.0 | 0.1% | 2025-08-12 | Fix |
| CVE-2024-41985 | Siemens SmartClient modules Opcenter QL Home (SC) insufficient session expiration | 2.1CNA v4.0 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-41984 | Siemens SmartClient modules Opcenter QL Home (SC) information disclosure through error messages | 2.1CNA v4.0 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-41983 | Siemens SmartClient modules Opcenter QL Home (SC) information disclosure through error messages | 5.1CNA v4.0 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-41982 | Siemens SmartClient modules Opcenter QL Home (SC) missing encryption | 5.9CNA v4.0 | 0.1% | 2025-08-12 | Fix |
| CVE-2024-41980 | Siemens SmartClient modules Opcenter QL Home (SC) missing encryption | 2.0CNA v4.0 | 0.1% | 2025-08-12 | Fix |
| CVE-2024-41979 | Siemens SmartClient modules Opcenter QL Home (SC) incorrect authorization | 7.5CNA v4.0 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-40588 | Fortinet FortiCamera relative path traversal | 4.2CNA v3.1 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-38805 | TianoCore edk2 iSCSI remote memory corruption and denial of service | 6.3CNA v3.1 | 0.2% | 2025-08-12 | Fix |
| CVE-2024-33607 | Intel(R) TDX module software some out-of-bounds read | 5.7CNA v4.0 | 0.1% | 2025-08-12 | Fix |
| CVE-2024-26009 | Fortinet FortiProxy authentication bypass | 7.9CNA v3.1 | 0.6% | 2025-08-12 | Fix |
| CVE-2024-32640 | MasaCMS SQL injection | 9.8CNA v3.1 | 76.6% | 2025-08-11 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2024-58238 | Linux kernel Bluetooth UART driver power save vulnerability | 7.1CNA v3.1 | 0.2% | 2025-08-09 | Fix |
| CVE-2024-58257 | Huawei EnzoH-W5611T OS command injection | 5.7CNA v3.1 | 0.3% | 2025-08-08 | Fix |
| CVE-2024-58256 | Huawei EnzoH-W5611T OS command injection | 4.5CNA v3.1 | 0.3% | 2025-08-08 | Fix |
| CVE-2024-58255 | Huawei EnzoH-W5611T OS command injection | 5.0CNA v3.1 | 0.3% | 2025-08-08 | |
| CVE-2024-56339 | IBM WebSphere Application Server information disclosure | 3.7CNA v3.1 | 0.4% | 2025-08-07 | Fix |
| CVE-2024-55401 | 4cstrategies Exonaut path traversal | 6.5CISA ADP v3.1 | 0.5% | 2025-08-07 | |
| CVE-2024-52680 | EyouCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-07 | |
| CVE-2024-42048 | OpenOrange Business Framework installation directory permissions DLL hijacking | 6.5CISA ADP v3.1 | 0.5% | 2025-08-07 | |
| CVE-2024-55402 | 4cstrategies Exonaut improper access control | 5.3CISA ADP v3.1 | 0.3% | 2025-08-06 | |
| CVE-2024-55399 | 4cstrategies Exonaut server-side request forgery | 6.5CISA ADP v3.1 | 0.3% | 2025-08-06 | |
| CVE-2024-55398 | 4cstrategies Exonaut incorrect default permissions | 6.5CISA ADP v3.1 | 0.3% | 2025-08-06 | |
| CVE-2024-52885 | The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway. | 5.0CNA v3.1 | 0.5% | 2025-08-06 | Fix |
| CVE-2024-8244 | Walk/WalkDir in path/filepath susceptible to symlink race | 3.7CISA ADP v3.1 | 0.2% | 2025-08-06 | Fix |
| CVE-2024-52890 | IBM Engineering Lifecycle Optimization Publishing cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-08-05 | Fix |
| CVE-2024-45183 | Samsung Exynos 2100 out-of-bounds write | 6.5CISA ADP v3.1 | 0.2% | 2025-08-04 | Fix |
| CVE-2024-52279 | Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string | 5.3NVD v3.1 | 1.0% | 2025-08-03 | Fix |
| CVE-2024-51775 | Apache Zeppelin: Command injection via CSWSH | 5.3NVD v3.1 | 0.3% | 2025-08-03 | Fix |
| CVE-2024-41177 | Apache Zeppelin: XSS in the Helium module | 6.1CISA ADP v3.1 | 0.6% | 2025-08-03 | Fix |
| CVE-2024-13978 | LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference | 2.0CNA v4.0 | 0.2% | 2025-08-01 | Fix |
| CVE-2024-34328 | Sielox AnyWare v2.1.2 open redirect | 6.3CISA ADP v3.1 | 0.2% | 2025-07-31 | |
| CVE-2024-34327 | Sielox Anyware SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-07-31 | |
| CVE-2024-48916 | Ceph is vulnerable to authentication bypass through RadosGW | 8.1CNA v3.1 | 0.2% | 2025-07-30 | Fix |
| CVE-2024-45955 | Rocket Software Zena SQL injection | 7.3CISA ADP v3.1 | 0.4% | 2025-07-30 | |
| CVE-2024-45515 | Zimbra Collaboration cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-07-30 | Fix |
| CVE-2024-52894 | IBM Db2 for Linux, UNIX and Windows denial of service | 4.9CNA v3.1 | 0.3% | 2025-07-29 | Fix |
| CVE-2024-51473 | IBM Db2 for Linux, UNIX and Windows denial of service | 6.5CNA v3.1 | 0.3% | 2025-07-29 | Fix |
| CVE-2024-49828 | IBM Db2 for Linux, UNIX and Windows denial of service | 6.5CNA v3.1 | 0.3% | 2025-07-29 | Fix |
| CVE-2024-43018 | Piwigo SQL injection | 6.4CISA ADP v3.1 | 0.3% | 2025-07-29 | |
| CVE-2024-42655 | emqx nanomq improper access control | 8.8CISA ADP v3.1 | 0.4% | 2025-07-29 | |
| CVE-2024-42651 | emqx nanomq use-after-free | 7.5CISA ADP v3.1 | 0.4% | 2025-07-29 | |
| CVE-2024-42645 | FlashMQ reachable assertion | 7.5CISA ADP v3.1 | 0.5% | 2025-07-29 | Fix |
| CVE-2024-42644 | FlashMQ reachable assertion | 7.5CISA ADP v3.1 | 0.5% | 2025-07-29 | Fix |
| CVE-2024-49343 | IBM Informix Dynamic Server HTML injection | 5.4CNA v3.1 | 0.2% | 2025-07-28 | Fix |
| CVE-2024-49342 | IBM Informix Dynamic Server information disclosure | 7.5CNA v3.1 | 0.3% | 2025-07-28 | Fix |
| CVE-2024-58266 | Multiple issues involving quote API in shlex | 9.8v3.1 | 0.8% | 2025-07-27 | Fix |
| CVE-2024-58265 | Unauthenticated Nonce Increment in snow | 4.3v3.1 | 0.4% | 2025-07-27 | Fix |
| CVE-2024-58264 | serde-json-wasm stack overflow during recursive JSON parsing | 7.5v3.1 | 0.4% | 2025-07-27 | Fix |
| CVE-2024-58263 | cosmwasm-std integer overflow | 5.3v3.1 | 0.4% | 2025-07-27 | Fix |
| CVE-2024-58262 | curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub` | 5.1v3.1 | 0.2% | 2025-07-27 | Fix |
| CVE-2024-58261 | sequoia-pgp sequoia infinite loop | 7.5v3.1 | 0.4% | 2025-07-27 | Fix |
| CVE-2024-13507 | GeoDirectory WordPress plugin SQL injection | 7.5CNA v3.1 | 0.5% | 2025-07-26 | Fix |
| CVE-2024-48730 | ETSI Open-Source MANO default admin account privilege escalation | 6.5CISA ADP v3.1 | 0.5% | 2025-07-25 | |
| CVE-2024-48729 | ETSI Open-Source MANO admin users endpoint privilege escalation | 7.1CISA ADP v3.1 | 0.3% | 2025-07-25 | |
| CVE-2024-13976 | Commvault Windows Maintenance Installer DLL injection | 8.5CNA v4.0 | 0.2% | 2025-07-25 | Fix |
| CVE-2024-13975 | Commvault Windows Access Nodes Compromise via Local File Server Agent Abuse | 8.5CNA v4.0 | 0.1% | 2025-07-25 | Fix |
| CVE-2024-53288 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.2% | 2025-07-23 | Fix |
| CVE-2024-53287 | Synology Router Manager (SRM) cross-site scripting | 5.9CNA v3.1 | 0.2% | 2025-07-23 | Fix |
| CVE-2024-53286 | Synology Router Manager (SRM) OS command improper neutralization | 7.2CNA v3.1 | 1.1% | 2025-07-23 | Fix |
| CVE-2024-41751 | IBM SmartCloud Analytics Log Analysis client-side enforcement of server-side security | 5.5CNA v3.1 | 0.1% | 2025-07-23 | Fix |
| CVE-2024-41750 | IBM SmartCloud Analytics Log Analysis client-side enforcement of server-side security | 5.5CNA v3.1 | 0.1% | 2025-07-23 | Fix |
| CVE-2024-40686 | IBM SmartCloud Analytics Log Analysis host header injection | 5.4CNA v3.1 | 0.2% | 2025-07-23 | Fix |
| CVE-2024-40682 | IBM SmartCloud Analytics Log Analysis denial of service | 6.2CNA v3.1 | 0.1% | 2025-07-23 | Fix |
| CVE-2024-12310 | Imprivata Enterprise Access Management Bypass of Login Screen on Shared Kiosk Workstations | 7.0CNA v4.0 | 0.2% | 2025-07-23 | |
| CVE-2024-38335 | IBM Security QRadar Network Threat Analytics denial of service | 4.5CNA v3.1 | 0.2% | 2025-07-22 | Fix |
| CVE-2024-55040 | Sensaphone WEB600 cross-site scripting | 6.1CISA ADP v3.1 | 0.8% | 2025-07-21 | |
| CVE-2024-13974 | Sophos Firewall reliance on untrusted input in a security decision | 8.1CNA v3.1 | 9.1% | 2025-07-21 | Fix |
| CVE-2024-13973 | Sophos Firewall WebAdmin SQL injection | 6.8CNA v3.1 | 12.3% | 2025-07-21 | Fix |
| CVE-2024-6107 | Canonical MAAS improper authentication | 9.6CNA v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2024-32124 | Fortinet FortiIsolator improper access control | 4.0CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2024-27779 | Fortinet FortiSandbox insufficient session expiration | 6.3CNA v3.1 | 0.5% | 2025-07-18 | Fix |
| CVE-2024-13175 | IDOR in Vidco Software's VOC TESTER | 5.5CNA v3.1 | 0.1% | 2025-07-18 | Fix |
| CVE-2024-42209 | HCL Connections is vulnerable to an information disclosure | 3.5CNA v3.1 | 0.2% | 2025-07-17 | Fix |
| CVE-2024-41921 | Open Robotics Robot Operating System (ROS) rostopic echo command code injection | 7.8CNA v3.1 | 0.2% | 2025-07-17 | |
| CVE-2024-41148 | Open Source Robotics Foundation Robot Operating System unsafe use of eval method in rostopic hz tool | 7.8CNA v3.1 | 0.2% | 2025-07-17 | |
| CVE-2024-39835 | Open Source Robotics Foundation Robot Operating System unsafe use of eval method in roslaunch tool | 7.8CNA v3.1 | 0.2% | 2025-07-17 | |
| CVE-2024-39289 | Open Source Robotics Foundation Robot Operating System unsafe use of eval method in rosparam tool | 7.8CNA v3.1 | 0.2% | 2025-07-17 | |
| CVE-2024-32323 | cnhcit.com Haichang OA v.1.0.0 SQL injection | 8.1CISA ADP v3.1 | 0.4% | 2025-07-17 | |
| CVE-2024-13972 | Sophos Intercept X incorrect default permissions | 8.8CNA v3.1 | 0.1% | 2025-07-17 | Fix |
| CVE-2024-42912 | META-INF Kft cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2025-07-16 | |
| CVE-2024-10032 | Eclipse GlassFish is vulnerable to stored XSS attacks through its Administration console | 6.1CNA v4.0 | 0.2% | 2025-07-16 | |
| CVE-2024-10031 | Eclipse GlassFish is vulnerable to stored XSS attacks through configuration file modifications | 5.8CNA v4.0 | 0.2% | 2025-07-16 | |
| CVE-2024-10029 | Eclipse GlassFish is vulnerable to reflected XSS attacks through its Administration console | 4.5CNA v4.0 | 0.2% | 2025-07-16 | |
| CVE-2024-9408 | Eclipse GlassFish is vulnerable to server side request forgery attacks through specific endpoints | 8.9CNA v4.0 | 0.3% | 2025-07-16 | |
| CVE-2024-9343 | Eclipse GlassFish is vulnerable to stored XSS attacks through its Administration console | 6.1CNA v4.0 | 0.2% | 2025-07-16 | |
| CVE-2024-9342 | Eclipse GlassFish is vulnerable to login brute force attacks through unlimited failed login attempts | 6.3CNA v4.0 | 0.4% | 2025-07-16 | Fix |
| CVE-2024-42650 | emqx nanomq denial of service | 7.5CISA ADP v3.1 | 0.6% | 2025-07-15 | |
| CVE-2024-51770 | HPE AutoPass License Server An information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-07-14 | Fix |
| CVE-2024-51769 | HPE AutoPass License Server An information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-07-14 | Fix |
| CVE-2024-51768 | HPE AutoPass License Server hsqldb-related remote code execution | 8.0CISA ADP v3.1 | 0.4% | 2025-07-14 | Fix |
| CVE-2024-51767 | HPE AutoPass License Server An authentication bypass | 7.3CISA ADP v3.1 | 1.3% | 2025-07-14 | Fix |
| CVE-2024-42649 | emqx nanomq memory leak | 6.5v3.1 | 0.3% | 2025-07-14 | |
| CVE-2024-42648 | emqx nanomq heap-based buffer overflow | 6.5v3.1 | 0.3% | 2025-07-14 | |
| CVE-2024-42646 | emqx nanomq out-of-bounds read | 7.5v3.1 | 0.4% | 2025-07-14 | |
| CVE-2024-26293 | Unauthenticated path traversal affecting Avid NEXIS | 8.7CNA v4.0 | 0.4% | 2025-07-14 | Fix |
| CVE-2024-26292 | Authenticated arbitrary file deletion affecting Avid NEXIS | 7.1CNA v4.0 | 0.4% | 2025-07-14 | Fix |
| CVE-2024-26291 | Authenticated arbitrary file read affecting Avid NEXIS | 8.7CNA v4.0 | 1.1% | 2025-07-14 | NucleiFix |
| CVE-2024-58258 | SugarCRM code injection | 7.2CNA v3.1 | 22.4% | 2025-07-13 | Exploit codeFix |
| CVE-2024-41169 | Apache Zeppelin: Raft directory listing and file read | 7.5CISA ADP v3.1 | 0.6% | 2025-07-12 | Fix |
| CVE-2024-38648 | Ivanti DSM hard-coded credentials | 5.7NVD v3.1 | 0.7% | 2025-07-12 | Fix |
| CVE-2024-47065 | meshtastic firmware Traceroute_APP responses are not rate-limited | 2.7CNA v4.0 | 0.3% | 2025-07-11 | Fix |
| CVE-2024-47252 | Apache HTTP Server: Mod_ssl error log variable escaping | 7.5CISA ADP v3.1 | 0.8% | 2025-07-10 | Fix |
| CVE-2024-43394 | Apache HTTP Server: SSRF on Windows due to UNC paths | 7.5CISA ADP v3.1 | 1.2% | 2025-07-10 | Fix |
| CVE-2024-43204 | Apache HTTP Server: SSRF with mod_headers setting Content-Type header | 7.5CISA ADP v3.1 | 0.9% | 2025-07-10 | Fix |
| CVE-2024-42516 | Apache HTTP Server: HTTP response splitting | 7.5CISA ADP v3.1 | 0.8% | 2025-07-10 | Fix |
| CVE-2024-39752 | IBM Analytics Content Hub file upload | 6.8CNA v3.1 | 0.3% | 2025-07-10 | Fix |
| CVE-2024-38327 | IBM Analytics Content Hub information disclosure | 6.8CNA v3.1 | 0.3% | 2025-07-10 | Fix |
| CVE-2024-37524 | IBM Analytics Content Hub information disclosure | 5.3CNA v3.1 | 0.3% | 2025-07-10 | Fix |
| CVE-2024-36697 | Allworx System Software admin login page SessionID parameter cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-07-10 | |
| CVE-2024-7650 | Remote code execution vulnerability discovered in OpenText™ Directory Services CE | 6.3CNA v4.0 | 0.3% | 2025-07-10 | |
| CVE-2024-56468 | IBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of service | 7.5CNA v3.1 | 0.4% | 2025-07-08 | Fix |
| CVE-2024-55599 | Fortinet FortiOS improperly implemented security check | 4.9CNA v3.1 | 0.4% | 2025-07-08 | Fix |
| CVE-2024-53009 | Qualcomm Snapdragon improper validation of array index in Automotive Autonomy | 5.3CNA v3.1 | 0.1% | 2025-07-08 | Fix |
| CVE-2024-52965 | Fortinet FortiOS missing authentication step | 6.8CNA v3.1 | 0.3% | 2025-07-08 | Fix |
| CVE-2024-49784 | IBM OpenPages with Watson information disclosure | 5.3CNA v3.1 | 0.1% | 2025-07-08 | Fix |
| CVE-2024-49783 | IBM OpenPages with Watson information disclosure | 5.3CNA v3.1 | 0.3% | 2025-07-08 | Fix |
| CVE-2024-36357 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries. | 5.6CNA v3.1 | 0.3% | 2025-07-08 | Fix |
| CVE-2024-36350 | AMD Ryzen and EPYC processors information disclosure | 5.6CNA v3.1 | 0.5% | 2025-07-08 | Fix |
| CVE-2024-36349 | AMD EPYC™ 7002 Series Processors information disclosure | 3.8CNA v3.1 | 0.2% | 2025-07-08 | Fix |
| CVE-2024-36348 | AMD EPYC™ 7002 Series Processors information disclosure | 3.8CNA v3.1 | 0.3% | 2025-07-08 | Fix |
| CVE-2024-31854 | Siemens SICAM TOOLBOX II improper certificate validation | 7.7CNA v4.0 | 0.2% | 2025-07-08 | Fix |
| CVE-2024-31853 | Siemens SICAM TOOLBOX II improper certificate validation | 7.7CNA v4.0 | 0.2% | 2025-07-08 | Fix |
| CVE-2024-58117 | Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview | 4.0CNA v3.1 | 0.1% | 2025-07-07 | Fix |
| CVE-2024-43334 | Zilom WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-07 | Fix |
| CVE-2024-43190 | IBM Engineering Requirements Management DOORS weak authentication | 5.9CNA v3.1 | 0.3% | 2025-07-07 | Fix |
| CVE-2024-37658 | Sir Gnuboard An open redirect | 6.1CISA ADP v3.1 | 0.2% | 2025-07-07 | Fix |
| CVE-2024-37657 | Sir Gnuboard An open redirect | 6.1CISA ADP v3.1 | 0.2% | 2025-07-07 | Fix |
| CVE-2024-37656 | Sir Gnuboard An open redirect | 6.1CISA ADP v3.1 | 0.5% | 2025-07-07 | Nuclei |
| CVE-2024-25178 | Luajit out-of-bounds read | 9.1CISA ADP v3.1 | 0.6% | 2025-07-07 | Fix |
| CVE-2024-25177 | Luajit null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2025-07-07 | Fix |
| CVE-2024-25176 | Luajit stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2025-07-07 | Fix |
| CVE-2024-11937 | Premium Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-04 | Fix |
| CVE-2024-9453 | Jenkins-image: Sensitive data disclosure when using openshift Jenkins image | 6.5CNA v3.1 | 0.4% | 2025-07-04 | |
| CVE-2024-9017 | PeepSo Core: Groups WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-03 | Fix |
| CVE-2024-5647 | BlossomThemes Social Feed WordPress plugin cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-07-03 | Fix |
| CVE-2024-35164 | Apache Guacamole: Improper input validation of console codes | 6.8CNA v3.1 | 0.5% | 2025-07-02 | Fix |
| CVE-2024-13786 | Education Center LMS and Online Courses WordPress theme PHP object injection | 9.8CNA v3.1 | 0.6% | 2025-07-02 | Fix |
| CVE-2024-13451 | Contact Form by Bit Form WordPress plugin unauthenticated sensitive information exposure | 7.5v3.1 | 0.3% | 2025-07-02 | Fix |
| CVE-2024-11405 | WP Front-end login and register WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-07-02 | |
| CVE-2024-49365 | tiny-secp256k1 allows for verify bypass when running in bundled environment | 8.1CNA v4.0 | 0.2% | 2025-07-01 | Fix |
| CVE-2024-49364 | bitcoinjs tiny-secp256k1 message signing information disclosure | 8.1CNA v4.0 | 0.4% | 2025-07-01 | Fix |
| CVE-2024-46993 | Electron vulnerable to heap buffer overflow in NativeImage::CreateFromPath | 4.4CNA v4.0 | 0.2% | 2025-07-01 | Fix |
| CVE-2024-46992 | Electron ASAR Integrity bypass by just modifying the content | 7.8CNA v3.1 | 0.1% | 2025-07-01 | Fix |
| CVE-2024-53621 | formSetCfm function of Tenda AC1206 buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-06-30 | |
| CVE-2024-12915 | Reflected XSS in Devinim Software's Modified Koha Library Software | 4.6CNA v3.1 | 0.2% | 2025-06-30 | Fix |
| CVE-2024-8419 | ifm electronic ifm Smart PLC AC402s improper access control vulnerability in AC4xxS devices | 7.5CNA v3.1 | 0.5% | 2025-06-30 | Fix |
| CVE-2024-24915 | SmartConsole sensitive credential exposure via Memory Dump | 6.1CNA v3.1 | 0.2% | 2025-06-29 | Fix |
| CVE-2024-52900 | IBM Cognos Analytics cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-06-28 | Fix |
| CVE-2024-39730 | IBM Datacap clickjacking | 5.4CNA v3.1 | 0.2% | 2025-06-28 | Fix |
| CVE-2024-36347 | AMD EPYC™ 7001 Series improper signature verification | 6.4CNA v3.1 | 0.1% | 2025-06-27 | Fix |
| CVE-2024-12827 | DWT - Directory and Listing WordPress theme unauthenticated arbitrary user password reset | 9.8CNA v3.1 | 0.4% | 2025-06-27 | Fix |
| CVE-2024-12364 | SQLi in Mavi Yeşil Software's Guest Tracking Software | 9.8CNA v3.1 | 0.4% | 2025-06-27 | |
| CVE-2024-12150 | SQLi in Eron Software's Wowwo CRM | 9.8CNA v3.1 | 0.4% | 2025-06-27 | |
| CVE-2024-12143 | SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal MikroDB | 9.8CNA v3.1 | 0.4% | 2025-06-27 | |
| CVE-2024-11739 | SQLi in Case Informatics' Case ERP | 9.8CNA v3.1 | 0.4% | 2025-06-27 | Fix |
| CVE-2024-56915 | NetBox cross-site scripting | 6.5CISA ADP v3.1 | 0.5% | 2025-06-26 | Fix |
| CVE-2024-52928 | Thebrowser Arc improper access control | 8.3NVD v3.1 | 0.5% | 2025-06-26 | Fix |
| CVE-2024-11584 | Canonical cloud-init incorrect permission assignment | 5.9CNA v3.1 | 0.1% | 2025-06-26 | Fix |
| CVE-2024-6174 | Canonical cloud-init improper authentication | 8.8CNA v3.1 | 0.3% | 2025-06-26 | Fix |
| CVE-2024-57708 | OneTrust SDK prototype pollution | 5.7CISA ADP v3.1 | 0.9% | 2025-06-25 | Exploit code |
| CVE-2024-51984 | Brother Industries HL-L8260CDN insufficiently protected credentials | 6.8CNA v3.1 | 1.0% | 2025-06-25 | Fix |
| CVE-2024-51983 | Brother Industries HL-L8260CDN improper syntax validation | 7.5CNA v3.1 | 11.8% | 2025-06-25 | Fix |
| CVE-2024-51982 | Brother Industries HL-L8260CDN improper syntax validation | 7.5CNA v3.1 | 10.7% | 2025-06-25 | Fix |
| CVE-2024-51981 | Brother Industries HL-L8260CDN CRLF injection | 5.3CNA v3.1 | 1.0% | 2025-06-25 | Fix |
| CVE-2024-51980 | Brother Industries HL-L8260CDN server-side request forgery | 5.3CNA v3.1 | 1.0% | 2025-06-25 | Fix |
| CVE-2024-51979 | Brother Industries HL-L8260CDN stack-based buffer overflow | 7.2CNA v3.1 | 1.1% | 2025-06-25 | Fix |
| CVE-2024-51978 | Brother Industries DCP-J928N-W/B weak credentials | 9.8CNA v3.1 | 15.7% | 2025-06-25 | NucleiKCVFix |
| CVE-2024-51977 | Brother Industries HL-L8260CDN sensitive information in an accessible file | 5.3CNA v3.1 | 46.6% | 2025-06-25 | NucleiExploit codeKCVFix |
| CVE-2024-27685 | PHPGurukul Student Record System SQL injection | 7.1CISA ADP v3.1 | 0.3% | 2025-06-25 | |
| CVE-2024-56918 | NetBox cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-24 | Fix |
| CVE-2024-56917 | NetBox cross-site scripting | 7.1CISA ADP v3.1 | 0.4% | 2025-06-24 | Fix |
| CVE-2024-56916 | NetBox cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-24 | Fix |
| CVE-2024-56731 | Gogs deletion of internal files allows remote command execution | 10.0CNA v3.1 | 1.2% | 2025-06-24 | Fix |
| CVE-2024-37743 | Mmz-001 Knowledgegpt code injection | 9.8CISA ADP v3.1 | 0.7% | 2025-06-24 | |
| CVE-2024-45347 | Mi Connect Service APP protocol flaws lead to unauthorized access | 9.6CNA v3.1 | 0.3% | 2025-06-23 | |
| CVE-2024-3511 | WSO2 Enterprise Integrator multiple incorrect authorization | 4.3CNA v3.1 | 0.2% | 2025-06-23 | Fix |
| CVE-2024-53298 | Dell PowerScale OneFS missing authorization | 9.8CNA v3.1 | 0.5% | 2025-06-20 | Fix |
| CVE-2024-7586 | Insertion of sensitive information into log file in GitLab | 4.1CNA v3.1 | 0.3% | 2025-06-20 | Fix |
| CVE-2024-4994 | Cross-site request forgery (CSRF) in GitLab | 8.1CNA v3.1 | 0.4% | 2025-06-20 | Fix |
| CVE-2024-4025 | Inefficient regular expression complexity in GitLab | 6.5CNA v3.1 | 0.5% | 2025-06-20 | Fix |
| CVE-2024-45208 | Versa Director improper access control | 9.8CNA v3.1 | 0.9% | 2025-06-19 | Fix |
| CVE-2024-24916 | Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin). | 6.5CNA v3.1 | 2.7% | 2025-06-19 | Fix |
| CVE-2024-54183 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-06-18 | Fix |
| CVE-2024-54172 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2025-06-18 | Fix |
| CVE-2024-40570 | Seacms SQL injection | 6.5CISA ADP v3.1 | 0.4% | 2025-06-17 | |
| CVE-2024-25573 | Ping Identity PingFederate stored cross-site scripting in Administrative Console Context | 6.9CNA v4.0 | 0.4% | 2025-06-15 | Fix |
| CVE-2024-38825 | Salt's salt.auth.pki module does not properly authenticate callers | 6.4CNA v3.1 | 0.2% | 2025-06-13 | Fix |
| CVE-2024-38824 | Salt vulnerable to directory traversal attack in file receiving method | 9.6CNA v3.1 | 1.0% | 2025-06-13 | Fix |
| CVE-2024-38823 | VMware Salt request server vulnerability | 2.7CNA v3.1 | 0.3% | 2025-06-13 | Fix |
| CVE-2024-38822 | VMware Salt minion token validation improper authentication | 2.7CNA v3.1 | 0.3% | 2025-06-13 | Fix |
| CVE-2024-56158 | XWiki allows SQL injection in query endpoint of REST API with Oracle | 9.3CNA v4.0 | 0.5% | 2025-06-12 | Fix |
| CVE-2024-55567 | InsydeH2O UsbCoreDxe improper input validation | 6.7NVD v3.1 | 0.2% | 2025-06-12 | Fix |
| CVE-2024-44906 | Uptrace Pgdriver SQL injection | 6.5CISA ADP v3.1 | 0.4% | 2025-06-12 | Fix |
| CVE-2024-44905 | Uptrace Pg go-pg SQL injection vulnerability via the component /types/append_value.go | 6.5CISA ADP v3.1 | 0.4% | 2025-06-12 | Fix |
| CVE-2024-9512 | Time-of-check time-of-use (TOCTOU) race condition in GitLab | 5.3CNA v3.1 | 0.2% | 2025-06-12 | Fix |
| CVE-2024-7562 | Revenera InstallShield insecure temporary file | 7.3CNA v4.0 | 0.1% | 2025-06-12 | |
| CVE-2024-35295 | Innomotics Perfect Harmony GH180 missing authentication | 5.2CNA v4.0 | 0.2% | 2025-06-11 | |
| CVE-2024-9062 | MacOS Archify: Local privilege escalation | 7.8CNA v3.1 | 0.1% | 2025-06-11 | |
| CVE-2024-8270 | Rocket.Chat Desktop macOS code signing entitlements incorrect authorization | 5.5CNA v3.1 | 0.2% | 2025-06-11 | |
| CVE-2024-7457 | MacOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences | 7.8CNA v3.1 | 0.2% | 2025-06-11 | |
| CVE-2024-1244 | OSSEC-HIDS Agent improper input validation | 9.5CNA v4.0 | 0.3% | 2025-06-11 | |
| CVE-2024-1243 | Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft | 7.2NVD v3.1 | 0.6% | 2025-06-11 | Fix |
| CVE-2024-57190 | Erxes Incorrect access control vulnerability | 9.8CISA ADP v3.1 | 0.6% | 2025-06-10 | Fix |
| CVE-2024-57189 | Erxes path traversal | 5.4CISA ADP v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-57186 | Erxes path traversal | 5.4CISA ADP v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-54019 | Fortinet FortiClientWindows improper certificate host validation | 4.4CNA v3.1 | 0.2% | 2025-06-10 | Fix |
| CVE-2024-50568 | Fortinet FortiOS man-in-the-middle | 5.6CNA v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-50562 | Fortinet FortiOS insufficient session expiration | 4.4CNA v3.1 | 1.2% | 2025-06-10 | Exploit codeFix |
| CVE-2024-45329 | Fortinet FortiPortal insecure direct object reference | 3.9CNA v3.1 | 0.3% | 2025-06-10 | Fix |
| CVE-2024-43706 | Kibana improper authorization | 7.6CNA v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-41797 | Siemens RUGGEDCOM RST2428P improper privilege management | 5.3CNA v4.0 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-41505 | Jetimob Imobiliaria cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-10 | |
| CVE-2024-41504 | Jetimob Imobiliaria cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-10 | |
| CVE-2024-41503 | Jetimob Imobiliaria cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-10 | |
| CVE-2024-41502 | Jetimob Imobiliaria cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-10 | |
| CVE-2024-40625 | GeoServer Coverage REST API allows server side request forgery | 5.5CNA v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-38524 | geoserver GWC Home page communicate version and revision information | 5.3CNA v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-37396 | Vanderbilt REDCap Calendar function stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2025-06-10 | Fix |
| CVE-2024-37395 | Vanderbilt REDCap Public Survey function stored cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2025-06-10 | |
| CVE-2024-37394 | Vanderbilt REDCap Project Dashboards stored cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2025-06-10 | Fix |
| CVE-2024-34711 | GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF) | 9.3CNA v3.1 | 0.3% | 2025-06-10 | Fix |
| CVE-2024-32119 | Fortinet FortiClientEMS weak authentication | 4.6CNA v3.1 | 0.3% | 2025-06-10 | Fix |
| CVE-2024-29198 | GeoServer vulnerable to unauthenticated SSRF via TestWfsPost | 7.5CNA v3.1 | 2.3% | 2025-06-10 | NucleiFix |
| CVE-2024-13090 | Privilege escalation in Guardian/CMC | 7.3CNA v4.0 | 0.1% | 2025-06-10 | Fix |
| CVE-2024-13089 | Authenticated RCE in update functionality in Guardian/CMC | 7.5CNA v4.0 | 1.0% | 2025-06-10 | Fix |
| CVE-2024-47081 | requests vulnerable to .netrc credentials leak via malicious URLs | 5.3CNA v3.1 | 1.0% | 2025-06-09 | Fix |
| CVE-2024-46452 | VigyBag Open Source Online Shop password reset function host header injection | 6.1CISA ADP v3.1 | 0.3% | 2025-06-09 | |
| CVE-2024-55585 | moPS missing authentication | 9.0CNA v4.0 | 0.4% | 2025-06-07 | |
| CVE-2024-9994 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-06-07 | Fix |
| CVE-2024-9993 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-06-07 | Fix |
| CVE-2024-58114 | Huawei HarmonyOS resource allocation control failure vulnerability in the ArkUI framework | 4.0CNA v3.1 | 0.1% | 2025-06-06 | Fix |
| CVE-2024-56805 | QNAP QTS and QuTS hero heap-based buffer overflow | 5.3CNA v4.0 | 0.4% | 2025-06-06 | Fix |
| CVE-2024-56343 | IBM Verify Identity Access Digital Credentials denial of service | 4.3CNA v3.1 | 0.3% | 2025-06-06 | Fix |
| CVE-2024-56342 | IBM Verify Identity Access Digital Credentials information disclosure | 4.3CNA v3.1 | 0.3% | 2025-06-06 | Fix |
| CVE-2024-50406 | QNAP License Center cross-site scripting | 2.0CNA v4.0 | 0.3% | 2025-06-06 | Fix |
| CVE-2024-46941 | SystemUI component protection settings vulnerability | 4.8CNA v4.0 | 0.2% | 2025-06-06 | |
| CVE-2024-22330 | IBM Security Verify Governance information disclosure | 5.9CNA v3.1 | 0.3% | 2025-06-06 | Fix |
| CVE-2024-13088 | QNAP QuRouter improper authentication | 5.2CNA v4.0 | 0.3% | 2025-06-06 | Fix |
| CVE-2024-13087 | QNAP QuRouter OS command injection | 2.4CNA v4.0 | 0.6% | 2025-06-06 | Fix |
| CVE-2024-31127 | MacOS Zscaler Client Connector local privilege escalation | 7.3CNA v3.1 | 0.1% | 2025-06-04 | Fix |
| CVE-2024-13967 | ABB EIBPORT V3 KNX web server configuration page session fixation | 9.4CNA v4.0 | 0.5% | 2025-06-04 | Fix |
| CVE-2024-54189 | Parallels Desktop Snapshot functionality privilege escalation | 7.8CNA v3.1 | 0.3% | 2025-06-03 | |
| CVE-2024-53026 | Qualcomm Snapdragon buffer over-read in Data Network Stack and Connectivity | 8.2CNA v3.1 | 0.3% | 2025-06-03 | Fix |
| CVE-2024-53021 | Qualcomm Snapdragon buffer over-read in Data Network Stack and Connectivity | 8.2CNA v3.1 | 0.2% | 2025-06-03 | Fix |
| CVE-2024-53020 | Qualcomm Snapdragon buffer over-read in Data Network Stack and Connectivity | 8.2CNA v3.1 | 0.2% | 2025-06-03 | Fix |
| CVE-2024-53019 | Qualcomm Snapdragon buffer over-read in Data Network Stack and Connectivity | 8.2CNA v3.1 | 0.2% | 2025-06-03 | Fix |
| CVE-2024-53018 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera driver | 6.6CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-53017 | Qualcomm Snapdragon use of out-of-range pointer offset in Camera driver | 6.6CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-53016 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera driver | 6.6CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-53015 | Qualcomm Snapdragon use-after-free in Computer Vision | 6.6CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-53013 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 6.6CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-53010 | Qualcomm Snapdragon improper access control in Core | 7.8CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-52561 | Parallels Desktop Snapshot functionality privilege escalation | 7.8CNA v3.1 | 0.3% | 2025-06-03 | |
| CVE-2024-45655 | IBM Application Gateway incorrect permission assignment | 5.5CNA v3.1 | 0.1% | 2025-06-03 | Fix |
| CVE-2024-36486 | Parallels Desktop privilege escalation | 7.8CNA v3.1 | 0.3% | 2025-06-03 | |
| CVE-2024-12718 | Python CPython bypass extraction filter to modify file metadata outside extraction directory | 5.3CNA v3.1 | 0.8% | 2025-06-03 | Fix |
| CVE-2024-57783 | alexpinel Dot cross-site scripting | 8.1CNA v3.1 | 0.2% | 2025-06-02 | |
| CVE-2024-57459 | Vishalmathur CloudClassroom-PHP-Project time-based SQL injection | 7.3CISA ADP v3.1 | 0.2% | 2025-06-02 | |
| CVE-2024-54028 | catdoc OLE Document DIFAT parser functionality integer underflow | 7.8v3.1 | 0.3% | 2025-06-02 | Fix |
| CVE-2024-52035 | catdoc integer overflow | 7.8v3.1 | 0.3% | 2025-06-02 | Fix |
| CVE-2024-48877 | xls2csv memory corruption | 7.8v3.1 | 0.3% | 2025-06-02 | Fix |
| CVE-2024-40114 | Sitecom Wlx-2006 cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-06-02 | |
| CVE-2024-40113 | Sitecom Wlx-2006 default credentials | 6.5CISA ADP v3.1 | 0.3% | 2025-06-02 | |
| CVE-2024-40112 | Sitecom Wlx-2006 local file inclusion | 5.9CISA ADP v3.1 | 0.5% | 2025-06-02 | |
| CVE-2024-12168 | DLL hijacking in Yandex Telemost | 8.4CNA v4.0 | 0.2% | 2025-06-02 | Fix |
| CVE-2024-11857 | Realtek Bluetooth HCI Adaptor privilege escalation | 8.5CNA v4.0 | 0.2% | 2025-06-02 | Fix |
| CVE-2024-8008 | Reflected cross-site scripting in multiple WSO2 Products | 5.2CNA v3.1 | 0.5% | 2025-06-02 | Fix |
| CVE-2024-7074 | Authenticated arbitrary file upload in multiple WSO2 Products | 6.8CNA v3.1 | 17.2% | 2025-06-02 | Fix |
| CVE-2024-7073 | Unauthenticated server-side request forgery (SSRF) in multiple WSO2 Products via SOAP Admin services | 6.5CNA v3.1 | 0.2% | 2025-06-02 | Fix |
| CVE-2024-3509 | Stored cross-site scripting in Management console of multiple WSO2 Products | 4.3CNA v3.1 | 0.2% | 2025-06-02 | Fix |
| CVE-2024-1440 | Open redirection in multiple WSO2 Products via Multi-Option Authentication endpoint | 5.4CNA v3.1 | 0.2% | 2025-06-02 | Fix |
| CVE-2024-42191 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking | 6.5CNA v3.1 | 0.3% | 2025-05-30 | Fix |
| CVE-2024-42190 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking | 6.5CNA v3.1 | 0.3% | 2025-05-30 | Fix |
| CVE-2024-23589 | HCL Glovius Cloud is susceptible to an Outdated Hash Algorithm vulnerability | 6.8CNA v3.1 | 0.1% | 2025-05-30 | |
| CVE-2024-13917 | Intent injection in Kruger&Matz AppLock application | 8.3CNA v4.0 | 0.2% | 2025-05-30 | |
| CVE-2024-13916 | Exposure of Applications' Encryption PINs in Kruger&Matz AppLock | 6.9CNA v4.0 | 0.2% | 2025-05-30 | |
| CVE-2024-13915 | Unrestricted Access to Exported service in com.pri.factorytest | 6.9CNA v4.0 | 0.2% | 2025-05-30 | Fix |
| CVE-2024-12224 | idna accepts Punycode labels that do not produce any non-ASCII when decoded | 5.1CNA v4.0 | 0.2% | 2025-05-30 | Fix |
| CVE-2024-7097 | Incorrect authorization in multiple WSO2 Products | 4.3CNA v3.1 | 0.7% | 2025-05-30 | NucleiFix |
| CVE-2024-7096 | Privilege escalation in multiple WSO2 Products via SOAP Admin service due to business logic flaw | 4.2CNA v3.1 | 0.7% | 2025-05-30 | Fix |
| CVE-2024-54952 | MikroTik RouterOS null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2025-05-29 | |
| CVE-2024-53423 | Opennetworking ONOS denial of service | 5.6CISA ADP v3.1 | 0.3% | 2025-05-29 | |
| CVE-2024-52588 | Strapi allows server-side request forgery in Webhook function | 4.9CNA v3.1 | 0.6% | 2025-05-29 | Fix |
| CVE-2024-51392 | OpenKnowledgeMaps Headstart getPDF.php privilege escalation | 8.8CISA ADP v3.1 | 0.4% | 2025-05-29 | |
| CVE-2024-49350 | IBM Db2 denial of service | 6.5CNA v3.1 | 0.4% | 2025-05-29 | Fix |
| CVE-2024-22654 | Broadcom tcpreplay infinite loop | 7.5CISA ADP v3.1 | 0.4% | 2025-05-29 | Fix |
| CVE-2024-22653 | Yasm null pointer dereference | 4.8CISA ADP v3.1 | 0.2% | 2025-05-29 | Fix |
| CVE-2024-57338 | M2Soft CROWNIX Report and ERS file upload vulnerability | 6.5CISA ADP v3.1 | 0.3% | 2025-05-28 | |
| CVE-2024-57337 | opcode An arbitrary file upload | 6.5CISA ADP v3.1 | 0.3% | 2025-05-28 | |
| CVE-2024-57336 | M2Soft CROWNIX Report and ERS improper access control | 6.5CISA ADP v3.1 | 0.2% | 2025-05-28 | |
| CVE-2024-54020 | Fortinet FortiManager missing authorization | 2.1CNA v3.1 | 0.2% | 2025-05-28 | Fix |
| CVE-2024-51453 | IBM Sterling Secure Proxy directory traversal | 4.3CNA v3.1 | 0.5% | 2025-05-28 | Fix |
| CVE-2024-47057 | Mautic user name enumeration possible due to response time difference on password reset form | 5.3CNA v3.1 | 0.3% | 2025-05-28 | Fix |
| CVE-2024-47056 | Mautic does not shield .env files from web traffic | 5.1CNA v3.1 | 0.1% | 2025-05-28 | Fix |
| CVE-2024-47055 | Mautic segment cloning doesn't have a proper permission check | 4.3CNA v3.1 | 0.3% | 2025-05-28 | Fix |