CVE-2024 list

CVE-2024 records published after 2024

Page two of six: records 1,001 to 2,000 of the 5,832 published after 2024, newest first. The first page carries the figures for After 2024.

CVE-2024 records published after 2024, newest first: records 1,001 to 2,000 of 5,832
CVE Summary CVSS EPSS Published Signals
CVE-2024-38341IBM Sterling Secure Proxy information disclosure5.9CNA v3.10.2%2025-05-28Fix
CVE-2024-56193Google Android insecure permissions5.1CISA ADP v3.10.1%2025-05-27Fix
CVE-2024-49197Samsung Exynos 980 out-of-bounds read6.5CISA ADP v3.10.3%2025-05-27Fix
CVE-2024-49196Samsung Exynos 1480 type confusion7.5CISA ADP v3.10.4%2025-05-27Fix
CVE-2024-47090Nagvis XSS via WYSIWYG editor5.1CNA v4.00.2%2025-05-27Fix
CVE-2024-45094IBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting5.5CNA v3.10.2%2025-05-27Fix
CVE-2024-38866Nagvis livestatus injection in dynmaps5.3CNA v4.00.4%2025-05-27Fix
CVE-2024-13966ZKTeco BioTime default password6.9CNA v4.00.4%2025-05-27
CVE-2024-11185Arista Networks EOS Layer 2 forwarding vulnerability6.5CNA v3.10.3%2025-05-27
CVE-2024-13427Page Builder: Pagelayer Drag and Drop website builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-05-24Fix
CVE-2024-51360PHPGurukul Hospital Management System code injection9.8v3.10.9%2025-05-23
CVE-2024-51108Anujk305 Medical Card Generation System stored cross-site scripting5.4v3.10.2%2025-05-23
CVE-2024-51107Anujk305 Medical Card Generation System stored cross-site scripting4.8v3.10.3%2025-05-23
CVE-2024-51103PHPGurukul Student Management System SQL injection6.5CISA ADP v3.10.4%2025-05-23
CVE-2024-51102PHPGurukul Student Management System SQL injection4.4CISA ADP v3.10.2%2025-05-23
CVE-2024-51101PHPGurukul Restaurant Table Booking System SQL injection9.8v3.10.5%2025-05-23
CVE-2024-51099PHPGurukul Medical Card Generation System reflected cross-site scripting6.1CISA ADP v3.10.3%2025-05-23
CVE-2024-48704PHPGurukul Medical Card Generation System cross-site scripting6.1CISA ADP v3.10.3%2025-05-23
CVE-2024-48702PHPGurukul Old Age Home Management System cross-site scripting5.4v3.10.2%2025-05-23
CVE-2024-13945ABB ASPECT-Enterprise stored absolute path traversal8.4CNA v4.00.4%2025-05-23
CVE-2024-9163User interface (UI) misrepresentation of critical information in GitLab3.5CNA v3.10.4%2025-05-23Fix
CVE-2024-7803Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.5%2025-05-23Fix
CVE-2024-54188Infoblox Netmri arbitrary file read5.3CISA ADP v3.19.0%2025-05-22Emerging ThreatsFix
CVE-2024-52874Infoblox Netmri SQL injection8.8CISA ADP v3.110.2%2025-05-22Emerging ThreatsFix
CVE-2024-51553ABB ASPECT-Enterprise external control of a file path7.0CNA v4.00.3%2025-05-22
CVE-2024-51552ABB ASPECT-Enterprise weak password Storage7.1CNA v4.00.3%2025-05-22
CVE-2024-48853ABB ASPECT-Enterprise authenticated Escalation to guest to root9.5CNA v4.00.4%2025-05-22Fix
CVE-2024-48850ABB ASPECT-Enterprise authenticated absolute path traversal7.5CNA v4.00.5%2025-05-22Fix
CVE-2024-48848ABB ASPECT-Enterprise LARGECONTENT device disk overutilization7.0CNA v4.00.4%2025-05-22
CVE-2024-41199Ocuco Innovation improper privilege management7.2CISA ADP v3.10.5%2025-05-22
CVE-2024-41198Ocuco Innovation improper authentication9.8CISA ADP v3.10.6%2025-05-22
CVE-2024-41197Ocuco Innovation improper authentication9.8CISA ADP v3.10.6%2025-05-22
CVE-2024-41196Ocuco Innovation improper authentication9.8CISA ADP v3.10.7%2025-05-22
CVE-2024-41195Ocuco Innovation improper authentication9.8CISA ADP v3.10.6%2025-05-22
CVE-2024-40462Ocuco Innovation improper privilege management7.8CISA ADP v3.10.2%2025-05-22
CVE-2024-40461Ocuco Innovation improper privilege management7.8CISA ADP v3.10.2%2025-05-22
CVE-2024-40460Ocuco Innovation improper privilege management7.8CISA ADP v3.10.2%2025-05-22
CVE-2024-40459Ocuco Innovation improper privilege management7.8CISA ADP v3.10.2%2025-05-22
CVE-2024-40458Ocuco Innovation improper privilege management7.8CISA ADP v3.10.2%2025-05-22
CVE-2024-25010Ericsson RAN Compute and Site Controller 6610 improper input validation8.8CNA v3.10.3%2025-05-22Fix
CVE-2024-13958ABB ASPECT-Enterprise stored cross-site scripting4.6CNA v4.00.2%2025-05-22
CVE-2024-13957ABB ASPECT-Enterprise SSRF server side request forgery7.0CNA v4.00.3%2025-05-22
CVE-2024-13956ABB ASPECT-Enterprise SSL Verification Bypass8.8CNA v4.00.4%2025-05-22
CVE-2024-13955ABB ASPECT-Enterprise SQL injection 2nd Order9.4CNA v4.00.4%2025-05-22
CVE-2024-13954ABB ASPECT-Enterprise serialization / deserialization of configuration data5.1CNA v4.00.2%2025-05-22
CVE-2024-13953ABB ASPECT-Enterprise sensitive Information disclosed in log files6.9CNA v4.00.4%2025-05-22
CVE-2024-13952ABB ASPECT-Enterprise remote code execution8.7CNA v4.00.4%2025-05-22
CVE-2024-13951ABB ASPECT-Enterprise one way hash with predictable salt6.1CNA v4.00.2%2025-05-22
CVE-2024-13950ABB ASPECT-Enterprise log injection6.9CNA v4.00.4%2025-05-22
CVE-2024-13949ABB ASPECT-Enterprise log injection6.9CNA v4.00.4%2025-05-22
CVE-2024-13948ABB ASPECT-Enterprise insecure permissions6.9CNA v4.00.2%2025-05-22
CVE-2024-13947ABB ASPECT-Enterprise External System or Configuration Control7.1CNA v4.00.4%2025-05-22
CVE-2024-13946ABB ASPECT-Enterprise binary planting / LoadLibrary DLL's not Signed7.1CNA v4.01.0%2025-05-22Exploit code
CVE-2024-13931ABB ASPECT-Enterprise authenticated relative path traversal7.5CNA v4.00.4%2025-05-22Fix
CVE-2024-13930ABB ASPECT-Enterprise authenticated unchecked loop condition5.9CNA v4.00.4%2025-05-22Fix
CVE-2024-13929ABB ASPECT-Enterprise authenticated Servlet command injection7.5CNA v4.00.7%2025-05-22Fix
CVE-2024-13928ABB ASPECT-Enterprise authenticated SQL injection7.5CNA v4.00.4%2025-05-22Fix
CVE-2024-12093Improper validation of Consistency within Input in GitLab6.8CNA v3.10.5%2025-05-22Fix
CVE-2024-9639ABB ASPECT-Enterprise authenticated remote code execution7.5CNA v4.00.7%2025-05-22Fix
CVE-2024-9544MapSVG - All Kinds of Maps and Store Locator for WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-05-22
CVE-2024-7487Improper authentication in WSO2 Identity Server allows Bypass of App-Native Authentication5.8CNA v3.10.3%2025-05-22Fix
CVE-2024-7103Reflected cross-site scripting (XSS) in WSO2 Identity Server Sub-Organization Login Flow4.6CNA v3.10.2%2025-05-22Fix
CVE-2024-6914Incorrect authorization in multiple WSO2 Products9.8CNA v3.10.7%2025-05-22Fix
CVE-2024-5962WSO2 API Manager authentication endpoint of multiple reflected cross-site scripting6.1CNA v3.10.3%2025-05-22Fix
CVE-2024-57529Jeppesen Jetplanner cross-site scripting6.1CISA ADP v3.10.4%2025-05-21
CVE-2024-56429Itech iLabClient hard-coded cryptographic key7.7CNA v3.10.2%2025-05-21
CVE-2024-56428Itech-gmbh iLabClient cleartext storage of sensitive information5.5CISA ADP v3.10.2%2025-05-21
CVE-2024-42922Aapanel OS command injection6.5CISA ADP v3.10.9%2025-05-21
CVE-2024-23337jq has signed integer overflow in jv.c:jvp_array_write4.3CNA v3.10.4%2025-05-21Fix
CVE-2024-12561Affiliate Sales in Google Analytics and other tools WordPress plugin open redirect6.1CNA v3.10.3%2025-05-21Fix
CVE-2024-53359Zalo information disclosure7.5CISA ADP v3.10.5%2025-05-20
CVE-2024-45641IBM Security ReaQta improper certificate validation6.5CNA v3.10.2%2025-05-20Fix
CVE-2024-5878Simplelightbox WordPress plugin cross-site scripting6.4CNA v3.10.4%2025-05-20Fix
CVE-2024-55063Easyvirt Dc Netscope code injection8.8CISA ADP v3.11.1%2025-05-19
CVE-2024-51106Anujk305 Medical Card Generation System cross-site scripting4.6CISA ADP v3.10.2%2025-05-19
CVE-2024-33939LMS by Masteriyo WordPress plugin broken authentication5.3CNA v3.10.9%2025-05-19NucleiFix
CVE-2024-47893GPU DDK OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups)6.5CISA ADP v3.10.3%2025-05-17Fix
CVE-2024-13613Wise Chat WordPress plugin unauthenticated sensitive information exposure7.5v3.10.5%2025-05-17Fix
CVE-2024-53827Ericsson Packet Core Controller (PCC) improper input validation7.5CNA v3.10.4%2025-05-16Fix
CVE-2024-51475IBM Content Navigator HTML injection5.4CNA v3.10.3%2025-05-16Fix
CVE-2024-40120SeaweedFS Vulnerable to SQL injection6.5CISA ADP v3.10.3%2025-05-16Fix
CVE-2024-8201Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer5.4CNA v3.10.1%2025-05-16Fix
CVE-2024-56006Jetpack Debug Tools WordPress plugin broken access control5.3CNA v3.10.3%2025-05-15Fix
CVE-2024-52880Insyde Kernel improper input validation7.9CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-52879InsydeH2O buffer over-read7.5CISA ADP v3.10.5%2025-05-15Fix
CVE-2024-52878InsydeH2O buffer over-read7.5CISA ADP v3.10.5%2025-05-15Fix
CVE-2024-52877InsydeH2O buffer over-read7.5CISA ADP v3.10.5%2025-05-15Fix
CVE-2024-51666Tours WordPress plugin broken access control4.3CNA v3.10.3%2025-05-15Fix
CVE-2024-13914File Manager Advanced Shortcode WordPress plugin local file inclusion7.2CNA v3.10.8%2025-05-15Fix
CVE-2024-13865S3Bubble S3Player reflected cross-site scripting6.1CISA ADP v3.10.4%2025-05-15
CVE-2024-13828Badgearoo WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-05-15
CVE-2024-13823360 Product Rotation WordPress plugin reflected XSS6.1CISA ADP v3.10.4%2025-05-15
CVE-2024-13730Podlove Podcast Publisher WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13729Podlove Podcast Publisher WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13727MemberSpace Membership Plugin and Paid Subscriptions WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-05-15NucleiFix
CVE-2024-13621The GDPR Framework By Data443 WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13619LifterLMS WP LMS for eLearning, Online Courses, & Quizzes WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-05-15NucleiFix
CVE-2024-13616VikBooking WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13486Icegram Engage WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13482Icegram Engage WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13384Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13383HD Quiz WordPress plugin Editor+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13382Calculated Fields Form WordPress plugin Admin+ stored XSS4.8NVD v3.10.3%2025-05-15Fix
CVE-2024-13357Ditty Responsive News Tickers, Sliders, and Lists WordPress plugin Author+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13313AWeber WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13128LearnPress WordPress LMS plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13127LearnPress WordPress LMS plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-13053Form Maker by 10Web WordPress plugin Admin+ stored XSS via theme Title4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12874Top Comments WordPress plugin Admin+ stored cross-site scripting4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-12873Custom Field Manager WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-05-15Nuclei
CVE-2024-12812WP ERP WordPress plugin Custom+ unauthorized access to Terminated Employee information7.5CISA ADP v3.10.5%2025-05-15Fix
CVE-2024-12808WP ERP Complete HR solution with recruitment WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12800IP Based Login WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12770WP ULike WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12767BuddyBoss platform WordPress plugin Private comment exposure via IDOR3.5CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12750Competition Form WordPress plugin Competition deletion via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-12743MailPoet WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12739Mobile Contact Bar WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12735Advance Post Prefix WordPress plugin Admin+ SQL injection7.2CISA ADP v3.10.6%2025-05-15
CVE-2024-12734Advance Post Prefix WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-05-15Nuclei
CVE-2024-12733AffiliateImporterEb WordPress plugin reflected XSS via Search6.1CISA ADP v3.10.3%2025-05-15
CVE-2024-12732AffiliateImporterEb WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-05-15Nuclei
CVE-2024-12726ClipArt WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-05-15
CVE-2024-12725Clasify Classified Listing WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-05-15
CVE-2024-12724WP DeskLite WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-05-15Nuclei
CVE-2024-12722Twitter Bootstrap Collapse aka Accordian Shortcode WordPress plugin stored XSS via shortcode5.4CISA ADP v3.10.3%2025-05-15
CVE-2024-12716Simple Basic Contact Form WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12680Prisna GWT WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12679Prisna GWT WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-12301JSP Store Locator WordPress plugin deletion via missing CSRF6.5CISA ADP v3.10.2%2025-05-15
CVE-2024-12282Smyx Wp-connect cross-site request forgery6.1CISA ADP v3.10.2%2025-05-15
CVE-2024-11843Panorama WordPress Project Management plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-11719Couleurcitron tarteaucitron.js for WordPress cross-site request forgery6.1CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-11718tarteaucitron-wp WordPress plugin vulnerable to stored cross-site scripting5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-11502Planning Center Online Giving WordPress plugin Contributor+ XSS via shortcode5.4CISA ADP v3.10.3%2025-05-15
CVE-2024-11373Connexion Logs WordPress plugin Log deletion via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-11372Connexion Logs WordPress plugin Admin+ SQL injection7.2CISA ADP v3.10.6%2025-05-15
CVE-2024-11269AHAthat WordPress plugin Admin+ SQL injection7.2CISA ADP v3.10.6%2025-05-15
CVE-2024-11267JSP Store Locator WordPress plugin Contributor+ SQL injection8.8CISA ADP v3.10.6%2025-05-15
CVE-2024-11266Geocache Stat Bar Widget WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-11221Full Screen (Page) Background Image Slideshow WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-11190jwp-a11y WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-11189Social Share And Social Locker ARSocial WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-11141Sailthru Triggermail WordPress plugin Subscriber+ stored XSS6.1CISA ADP v3.10.2%2025-05-15
CVE-2024-11140Real WP Shop Lite Ajax eCommerce Shopping Cart WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-05-15
CVE-2024-11109WP Google Review Slider WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10818JSFiddle Shortcode WordPress plugin Contributor+ XSS via shortcode5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10677BTEV WordPress plugin settings update via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-10639Auto Prune Posts WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10634Nokaut Offers Box WordPress plugin plugin reset via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-10632Nokaut Offers Box WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-10631Countdown Timer WordPress plugin Contributor+ stored XSS6.5CISA ADP v3.10.3%2025-05-15
CVE-2024-10504ARForms Builder WordPress plugin unauthenticated stored XSS5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10475Lead Form Builder WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10362Social Media Share Buttons WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10149Social Slider Feed WordPress plugin Admin+ stored XSS via Widgets4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10145Hubbub Lite WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10144Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin Contributor+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10143MB Custom Post Types and Custom Taxonomies WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10107Giveaways and Contests by RafflePress WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10098Spider Teams ApplyOnline uploaded application files information disclosure2.7CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-10076Automattic Jetpack and Jetpack Boost Site Accelerator stored cross-site scripting5.9CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10075Jetpack WordPress plugin unauthenticated arbitrary block and shortcode execution5.6CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-10054Happyforms WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-10009Website File Changes WordPress plugin Admin+ authenticated SQL injection4.1CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-9882Salon Booking System WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9879Website File Changes WordPress plugin authenticated SQL injection5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9838Auto Affiliate Links WordPress plugin Admin+ SQL injection5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9831Taskbuilder WordPress plugin Admin+ SQL injection7.2CISA ADP v3.10.6%2025-05-15Fix
CVE-2024-9765EKC Tournament Manager WordPress plugin local file download vulnerability6.5CISA ADP v3.11.6%2025-05-15NucleiFix
CVE-2024-9711EKC Tournament Manager WordPress plugin delete Tournaments via CSRF5.4CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-9709EKC Tournament Manager WordPress plugin Create Tournaments/Teams via CSRF5.4CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-9663CYAN Backup WordPress plugin Admin+ stored XSS via remote Storage settings5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9662CYAN Backup WordPress plugin Admin+ stored XSS via General settings5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9645Post Grid and Gutenberg Blocks WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9599Popup Box WordPress plugin Admin+ stored XSS5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9450Syntacticsinc eaSYNC PayPal settings cross-site request forgery6.5CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-9390RegistrationMagic WordPress plugin stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9238AVIF and SVG Uploader for WordPress Author+ stored XSS via SVG Uplaod5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9236Team Members Showcase WordPress plugin Editor+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9233GS Logo Slider WordPress plugin settings update via cross-site request forgery4.3CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-9227PowerPress Podcasting WordPress plugin Author+ XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-9182Maspik - Advanced Spam protection WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8854Polls CP WordPress plugin Admin+ stored XSS via Custom Styles5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8851Polls CP WordPress plugin Admin+ stored cross-site scripting5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8759Nested Pages WordPress plugin Editor+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8703Z-Downloads WordPress plugin unauthenticated stored XSS6.1CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8702Backup Database WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-8701Snumb130 events-calendar settings stored cross-site scripting4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-8700totalsoft Event Calendar calendar deletion missing authorization7.5CISA ADP v3.10.5%2025-05-15
CVE-2024-8699Z-Downloads WordPress plugin Admin+ arbitrary file upload7.2CISA ADP v3.10.7%2025-05-15Fix
CVE-2024-8673Z-Downloads WordPress plugin Admin+ stored XSS via SVG upload9.1CISA ADP v3.11.8%2025-05-15NucleiFix
CVE-2024-8670Photo Gallery by 10Web WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8620MapPress Maps for WordPress plugin Admin+ stored XSS via Map settings4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8619Ajax Search Lite WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-8618Page Builder: Pagelayer WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8617Quiz Maker WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8542Everest Forms WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8493The Events Calendar WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8492Hustle WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8426Pagelayer WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8398Simple Nav Archives WordPress plugin settings update via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-8397GDPR Cookie Consent WordPress plugin unauthenticated stored XSS5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8286GDPR Cookie Consent WordPress plugin Bulk delete via CSRF6.5CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-8284Download Manager WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-8245GamiPress - Reset User WordPress plugin GamiPress user data Removal via CSRF4.3CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-8187Smart Post Show WordPress plugin Editor+ stored XSS4.8NVD v3.10.3%2025-05-15Fix
CVE-2024-8095BabelZ Google Translate Widget WordPress plugin CSRF to stored XSS6.1NVD v3.10.2%2025-05-15
CVE-2024-8094Ntz Antispam WordPress plugin settings update via CSRF6.5NVD v3.10.2%2025-05-15
CVE-2024-8090JavaScript Logic WordPress plugin CSRF to stored XSS6.1NVD v3.10.2%2025-05-15
CVE-2024-8085PeoplePond WordPress plugin CSRF to stored XSS6.1CISA ADP v3.10.2%2025-05-15
CVE-2024-8082Widgets Reset WordPress plugin settings update via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-8050Custom Author Base WordPress plugin settings update via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-8032Smooth Gallery Replacement WordPress plugin CSRF to stored XSS6.1CISA ADP v3.10.2%2025-05-15
CVE-2024-8031Secure Downloads WordPress plugin Admin+ arbitrary file download6.5CISA ADP v3.10.5%2025-05-15Fix
CVE-2024-8009Sensei LMS WordPress plugin Teacher+ users email Address disclosure4.3CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-7984Joy Of Text Lite SMS messaging for WordPress plugin settings update via CSRF4.3CISA ADP v3.10.2%2025-05-15
CVE-2024-7769Wordpress Clicksold IDX plugin Admin+ XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-7762Simple Job Board WordPress plugin unauthenticated Resumes download3.7CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-7761Simple Job Board WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-7759PWA For WP and AMP Administrator+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-7758Stylish Price List WordPress plugin Contributor+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-7556Wordpress Simple Share plugin Admin+ XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-6809Simple Video Directory WordPress plugin unauthenticated SQLi9.8CISA ADP v3.10.7%2025-05-15Fix
CVE-2024-6798DL Verification WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-6797DL Robots.txt WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-6719Offload Videos Bunny.net, AWS S3 Subscriber+ CSRF8.1CISA ADP v3.10.2%2025-05-15Fix
CVE-2024-6718PVN Auth Popup WordPress plugin Contributor+ XSS via shortcode5.4NVD v3.10.3%2025-05-15
CVE-2024-6713PVN Auth Popup WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-6712MapFig Studio WordPress plugin stored XSS via CSRF6.1CISA ADP v3.10.2%2025-05-15
CVE-2024-6711Event Tickets with Ticket Scanner WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6708Profile Builder WordPress plugin Admin+ stored cross-site scripting4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6693WP Content Copy Protection and No Right Click (premium) WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6690WP Content Copy Protection and No Right Click (premium) WordPress plugin open redirect6.1CISA ADP v3.10.5%2025-05-15NucleiFix
CVE-2024-6668profilepro WordPress plugin Subscriber+ stored cross-site scripting5.4CISA ADP v3.10.3%2025-05-15
CVE-2024-6667kbucket WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6665kbucket WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6584Jetpack Boost WordPress plugin Admin+ SSRF9.1CISA ADP v3.10.5%2025-05-15Fix
CVE-2024-6486ImageMagick Engine WordPress plugin Administrator+ OS command injection7.2CISA ADP v3.12.2%2025-05-15Fix
CVE-2024-6478CTT Expresso para WooCommerce WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6462DL Yandex Metrika WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2024-6335Tracking Code Manager WordPress plugin Admin+ stored cross-site scripting4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-6159Push Notification for Post and BuddyPress WordPress plugin Multiple unauthenticated SQLi9.8CISA ADP v3.12.8%2025-05-15NucleiFix
CVE-2024-5440If-So Dynamic Content Personalization WordPress plugin Contributor+ shortcode stored XSS5.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-5026CM Tooltip Glossary WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-4665EventPrime Events Calendar, Bookings and Tickets WordPress plugin arbitrary booking settings update6.4CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-4091Responsive Gallery Grid WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-4004Advanced Cron Manager WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-4002Carousel, Slider, Gallery by WP Carousel WordPress plugin Editor+ stored XSS3.5CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-3996Post Grid, Post Carousel, & List Category Posts WordPress plugin Editor+ stored XSS3.5CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-3901Genesis Blocks WordPress plugin Contributor+ stored XSS6.8CISA ADP v3.10.6%2025-05-15Fix
CVE-2024-3062Save as PDF by Pdfcrowd WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-2869Easy Property Listings WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-2643My Sticky Bar WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-1663Ultimate Noindex Nofollow Tool II WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2024-0970User Activity Tracking and Log WordPress plugin IP spoofing5.3CISA ADP v3.10.4%2025-05-15Fix
CVE-2024-0852coreActivity WordPress plugin unauthenticated stored XSS8.8CISA ADP v3.10.7%2025-05-15Fix
CVE-2024-0249Advanced Schedule Posts WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-05-15
CVE-2024-58101Samsung Galaxy Buds and Galaxy Buds 2 Bluetooth pairing missing authorization8.1CISA ADP v3.10.2%2025-05-14
CVE-2024-57273Netgate pfSense CE cross-site scripting5.4CISA ADP v3.11.3%2025-05-14Fix
CVE-2024-57096Kingsoft WPS Office information disclosure5.5CISA ADP v3.10.2%2025-05-14
CVE-2024-56427Samsung Exynos 980 out-of-bounds read6.5CISA ADP v3.10.3%2025-05-14Fix
CVE-2024-56157iTop vulnerable to Self XSS in CSV Import6.3CNA v3.10.3%2025-05-14Fix
CVE-2024-55569Samsung Exynos 980 out-of-bounds write7.5CISA ADP v3.10.4%2025-05-14Fix
CVE-2024-54780Netgate pfSense CE code injection8.8CISA ADP v3.112.4%2025-05-14Fix
CVE-2024-54779Netgate pfSense CE cross-site scripting5.4CISA ADP v3.18.5%2025-05-14Fix
CVE-2024-52601iTop portal insecure direct object reference6.5CNA v3.10.3%2025-05-14Fix
CVE-2024-52290lf-edge ekuiper stored XSS in Configuration Key Functionality6.3CNA v3.10.3%2025-05-14Fix
CVE-2024-45516Synacor Zimbra Collaboration Suite cross-site scripting6.1CISA ADP v3.10.4%2025-05-14Fix
CVE-2024-45067Intel(R) Gaudi(R) software installers some incorrect default permissions5.4CNA v4.00.2%2025-05-14Fix
CVE-2024-24780Apache IoTDB: Remote code execution with untrusted URI of User-defined function9.8CISA ADP v3.11.3%2025-05-14Fix
CVE-2024-13940Ninja Forms Webhooks WordPress plugin server-side request forgery5.5CNA v3.10.2%2025-05-14Fix
CVE-2024-10865Reflected cross-site scripting vulnerability in OpenText Advanced Authentication9.4CNA v4.00.4%2025-05-14
CVE-2024-10864SQL injection vulnerability has been discovered in OpenText™ Advanced Authentication7.5CNA v4.00.3%2025-05-14
CVE-2024-8988PeepSo Core: File Uploads WordPress plugin insecure direct object reference5.3CNA v3.10.3%2025-05-14Fix
CVE-2024-56526OXID eShop may Display User Information4.9NVD v3.10.4%2025-05-13Fix
CVE-2024-51447Siemens Polarion V2310 response discrepancy6.9CNA v4.00.5%2025-05-13Fix
CVE-2024-51446Siemens Polarion V2310 cross-site scripting5.1CNA v4.00.3%2025-05-13Fix
CVE-2024-51445Siemens Polarion V2310 XML external entity injection7.1CNA v4.00.5%2025-05-13Fix
CVE-2024-51444Siemens Polarion V2310 SQL injection7.1CNA v4.00.5%2025-05-13Fix
CVE-2024-48869Intel Xeon 6 processor TDX and SGX privilege escalation5.6CNA v4.00.1%2025-05-13Fix
CVE-2024-48766NetAlertX path traversal8.6CNA v3.167.7%2025-05-13NucleiFix
CVE-2024-47800Intel(R) Graphics Driver software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2024-47795Intel(R) oneAPI DPC++/C++ Compiler software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2024-47550Endurance Gaming Mode software installers incorrect default permissions5.4CNA v4.00.1%2025-05-13Fix
CVE-2024-46895Intel(R) Arc™ & Iris(R) Xe graphics software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2024-46506NetAlertX missing authentication10.0CNA v3.162.0%2025-05-13NucleiMetasploitExploit codeFix
CVE-2024-45371Intel(R) Arc™ & Iris(R) Xe graphics software improper access control5.2CNA v4.00.1%2025-05-13Fix
CVE-2024-45333Intel(R) Data Center GPU Flex Series improper access control6.9CNA v4.00.1%2025-05-13Fix
CVE-2024-45332Intel(R) Processors information disclosure5.7CNA v4.00.3%2025-05-13Fix
CVE-2024-43420Intel Atom(R) Processors information disclosure5.7CNA v4.00.2%2025-05-13Fix
CVE-2024-43101Intel(R) Data Center GPU Flex Series improper access control5.8CNA v4.00.1%2025-05-13Fix
CVE-2024-42446AMI AptioV TOCTOU in SmmWhea7.5CNA v3.10.1%2025-05-13Fix
CVE-2024-39833Intel(R) QAT software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2024-39758Intel(R) Arc™ & Iris(R) Xe graphics software improper access control5.1CNA v4.00.1%2025-05-13Fix
CVE-2024-36340AMD μProf arbitrary file deletion6.6CNA v3.10.2%2025-05-13Fix
CVE-2024-36339AMD Optimizing CPU Libraries (AOCL) DLL hijacking7.3CNA v3.10.2%2025-05-13
CVE-2024-36321AMD AIM-T Manageability Service unquoted search path7.3CNA v3.10.2%2025-05-13
CVE-2024-36292Intel(R) Data Center GPU Flex Series denial of service8.2CNA v4.00.2%2025-05-13Fix
CVE-2024-35281Fortinet FortiClientMac improper isolation2.3CNA v3.10.1%2025-05-13Fix
CVE-2024-31150Intel(R) Graphics Driver software out-of-bounds read4.8CNA v4.00.2%2025-05-13Fix
CVE-2024-31073Intel(R) oneAPI Level Zero software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2024-29222Intel(R) Graphics Driver software out-of-bounds write5.8CNA v4.00.2%2025-05-13Fix
CVE-2024-28956Intel(R) Processors information disclosure5.7CNA v4.00.4%2025-05-13Fix
CVE-2024-28954Intel(R) Graphics Driver installers incorrect default permissions5.4CNA v4.00.1%2025-05-13Fix
CVE-2024-28036Intel(R) Arc™ GPU improper check for exceptional conditions5.7CNA v4.00.1%2025-05-13Fix
CVE-2024-23815Siemens Desigo CC missing authentication8.7CNA v4.00.6%2025-05-13Fix
CVE-2024-21960AMD Optimizing CPU Libraries (AOCL) incorrect default permissions7.3CNA v3.10.2%2025-05-13
CVE-2024-12533Phoenix SecureCore™ Technology™ 4 improper check for exceptional conditions3.3CNA v3.10.1%2025-05-13Fix
CVE-2024-6364Server Identity Validation Bypass in Absolute Persistence®6.9CNA v4.00.2%2025-05-13Fix
CVE-2024-56524Radware Cloud WAF improper output encoding9.1CISA ADP v3.10.6%2025-05-12Fix
CVE-2024-56523Radware Cloud WAF HTTP request smuggling9.1CISA ADP v3.10.6%2025-05-12Fix
CVE-2024-55466ThingsBoard Image Gallery arbitrary file upload6.5CISA ADP v3.10.4%2025-05-12Fix
CVE-2024-4982Pagure: Path traversal in view_issue_raw_file7.6CNA v3.10.7%2025-05-12Fix
CVE-2024-4981Pagure: _update_file_in_git follows symbolic links in temporary clones7.6CNA v3.10.4%2025-05-12Fix
CVE-2024-13962Link following local privilege escalation vulnerability in Avast Cleanup Premium7.8CNA v3.10.2%2025-05-09
CVE-2024-13961Avast Cleanup Premium TuneupSvc link following local privilege escalation7.8CNA v3.10.2%2025-05-09
CVE-2024-13960Link following local privilege escalation vulnerability in AVG TuneUp7.8CNA v3.10.2%2025-05-09
CVE-2024-13959Link following local privilege escalation vulnerability in AVG TuneUp7.8CNA v3.10.2%2025-05-09
CVE-2024-13944Norton Utilities Ultimate NortonUtilitiesSvc link following7.8CNA v3.10.2%2025-05-09
CVE-2024-13759Local privilege escalation in Avira Prime on Windows 10 x647.8CNA v3.10.2%2025-05-09
CVE-2024-12442Command injection in EnerSys AMPA, inclusive9.8CISA ADP v3.11.1%2025-05-09Fix
CVE-2024-11861Command injection in EnerSys AMPA versions9.8CISA ADP v3.11.5%2025-05-09Fix
CVE-2024-11617Envolve WordPress plugin unauthenticated arbitrary file upload via language_file and fonts_file9.8CNA v3.11.4%2025-05-09Fix
CVE-2024-9524Privilege escalation vulnerability in Avira Prime7.8CNA v3.10.2%2025-05-09
CVE-2024-8973Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2025-05-09Fix
CVE-2024-55651i-Educar stored cross-site scripting2.0CNA v4.00.3%2025-05-08
CVE-2024-13793D-themes Wolmart wolmart_loadmore shortcode code injection7.3v3.10.4%2025-05-08Fix
CVE-2024-13009Eclipse Jetty GZIP buffer release7.2CNA v3.10.5%2025-05-08Fix
CVE-2024-12378Arista Networks CloudVision Portal cleartext transmission of sensitive information9.1CNA v3.10.5%2025-05-08
CVE-2024-11186Arista Networks CloudVision Portal improper authentication10.0CNA v3.10.8%2025-05-08
CVE-2024-9448Arista Networks EOS traffic policies improper quantity validation7.5CNA v3.10.6%2025-05-08
CVE-2024-8100Arista CloudVision device onboarding token privilege escalation8.7CNA v3.10.6%2025-05-08
CVE-2024-6648Path traversal in AP Page Builder7.5v3.10.7%2025-05-08Exploit codeFix
CVE-2024-47619syslog-ng tranport: TLS host name wildcard matching too lax7.5CNA v3.10.4%2025-05-07Fix
CVE-2024-12120Royal Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2025-05-07Fix
CVE-2024-58252Huawei HarmonyOS vulnerability of insufficient information protection in the media library module6.2CNA v3.10.1%2025-05-06Fix
CVE-2024-49847Qualcomm Snapdragon buffer over-read in Multi-Mode Call Processor7.5CNA v3.10.3%2025-05-06Fix
CVE-2024-49846Qualcomm Snapdragon buffer over-read in Multi-Mode Call Processor8.2CNA v3.10.3%2025-05-06Fix
CVE-2024-49845Qualcomm Snapdragon improper input validation in HLOS7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-49844Qualcomm Snapdragon improper input validation in Automotive7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-49842Qualcomm Snapdragon improper access control in Hypervisor7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-49841Qualcomm Snapdragon Detection of Error Condition without action in Hypervisor7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-49835Qualcomm Snapdragon out-of-bounds write in SPS Applications7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-49830Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Audio6.6CNA v3.10.1%2025-05-06Fix
CVE-2024-49829Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Camera6.7CNA v3.10.1%2025-05-06Fix
CVE-2024-45583Qualcomm Snapdragon use-after-free in Secure Processor6.6CNA v3.10.1%2025-05-06Fix
CVE-2024-45581Qualcomm Snapdragon out-of-bounds write in Audio6.6CNA v3.10.1%2025-05-06Fix
CVE-2024-45579Qualcomm Snapdragon improper input validation in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45578Qualcomm Snapdragon improper validation of array index in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45577Qualcomm Snapdragon improper input validation in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45576Qualcomm Snapdragon improper validation of array index in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45575Qualcomm Snapdragon integer overflow or wraparound in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45574Qualcomm Snapdragon improper validation of array index in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45570Qualcomm Snapdragon use of out-of-range pointer offset in Camera driver6.6CNA v3.10.1%2025-05-06Fix
CVE-2024-45568Qualcomm Snapdragon buffer over-read in Camera driver6.7CNA v3.10.1%2025-05-06Fix
CVE-2024-45567Qualcomm Snapdragon use-after-free in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45566Qualcomm Snapdragon use-after-free in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45565Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera driver7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45564Qualcomm Snapdragon use-after-free in HLOS7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-45563Qualcomm Snapdragon out-of-bounds write in Camera driver6.6CNA v3.10.1%2025-05-06Fix
CVE-2024-45562Qualcomm Snapdragon use-after-free in HLOS6.6CNA v3.10.1%2025-05-06Fix
CVE-2024-45554Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2025-05-06Fix
CVE-2024-39442UNISOC chipsets sprd ssense service missing authorization6.2CNA v3.10.2%2025-05-06Fix
CVE-2024-12225Io.Quarkus:quarkus-security-webauthn: Quarkus webauthn unexpected authentication bypass9.1CNA v3.10.4%2025-05-06
CVE-2024-58237Linux kernel BPF tail call packet pointer tracking null pointer dereference7.8CNA v3.10.2%2025-05-05Fix
CVE-2024-58100Linux kernel BPF verifier extension program checks vulnerability7.8CNA v3.10.2%2025-05-05Fix
CVE-2024-58098Linux kernel BPF verifier packet pointer tracking vulnerability7.8CNA v3.10.2%2025-05-05Fix
CVE-2024-57235NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-57234NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-57233NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-57232NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-57231NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-57230NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-57229NETGEAR RAX50 command injection9.8v3.11.1%2025-05-05
CVE-2024-51991October CMS allows Unprotected SVG Rename in Media Manager1.1CNA v4.00.4%2025-05-05Fix
CVE-2024-42213HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment5.3CNA v3.10.3%2025-05-05Fix
CVE-2024-42212HCL BigFix Compliance is affected by an improper or missing SameSite attribute5.4CNA v3.10.2%2025-05-05Fix
CVE-2024-11615Envolve WordPress plugin unauthenticated Language file deletion5.3CNA v3.10.4%2025-05-05Fix
CVE-2024-58135Mojolicious mojo generate app session secret vulnerability5.3CISA ADP v3.10.6%2025-05-03Fix
CVE-2024-58134Mojolicious HMAC session cookie secret hard-coded cryptographic key8.1CISA ADP v3.10.5%2025-05-03Fix
CVE-2024-41753IBM Cloud Pak for Business Automation cross-site scripting6.1CNA v3.10.3%2025-05-03Fix
CVE-2024-13738StylemixThemes Motors shortcode handler code injection7.3CNA v3.10.5%2025-05-03Fix
CVE-2024-58253obfstr type confusion2.9CNA v3.10.2%2025-05-02Fix
CVE-2024-55913IBM Concert Software path traversal5.3CNA v3.10.5%2025-05-02Fix
CVE-2024-55912IBM Concert Software information disclosure5.9CNA v3.10.2%2025-05-02Fix
CVE-2024-55910IBM Concert Software server-side request forgery6.5CNA v3.10.2%2025-05-02Fix
CVE-2024-55909IBM Concert Software denial of service6.5CNA v3.10.4%2025-05-02Fix
CVE-2024-55069FFmpeg null pointer dereference5.3CISA ADP v3.10.3%2025-05-02Fix
CVE-2024-13860BuddyBoss Platform WordPress plugin stored cross-site scripting5.4v3.10.3%2025-05-02Fix
CVE-2024-13859BuddyBoss Platform WordPress plugin stored cross-site scripting5.4v3.10.3%2025-05-02Fix
CVE-2024-13858BuddyBoss Platform plugin and BuddyBoss WordPress theme stored cross-site scripting5.4v3.10.3%2025-05-02Fix
CVE-2024-13420G5Theme framework themes AJAX settings actions missing authorization4.3CNA v3.10.2%2025-05-02
CVE-2024-13419G5Theme Smart Framework stored cross-site scripting5.4v3.10.2%2025-05-02
CVE-2024-13418G5Theme Smart Framework unrestricted file upload8.8CNA v3.10.8%2025-05-02
CVE-2024-13344Advance Seat Reservation Management for WooCommerce WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-05-02Fix
CVE-2024-13322Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager unauthenticated SQL injection7.5CNA v3.11.8%2025-05-02NucleiFix
CVE-2024-12023FULL Cliente - Authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2025-05-02Fix
CVE-2024-11142CSRF in Gosoft Software's Proticaret E-Commerce8.8v3.10.2%2025-05-02Fix
CVE-2024-52979Elasticsearch uncontrolled resource consumption6.5CNA v3.10.6%2025-05-01Fix
CVE-2024-52976Elastic Agent inclusion of functionality from untrusted control sphere4.4CNA v3.10.2%2025-05-01Fix
CVE-2024-52903IBM Db2 denial of service5.3CNA v3.10.4%2025-05-01Fix
CVE-2024-48907Sematell Replyone server-side request forgery7.5CISA ADP v3.10.4%2025-05-01
CVE-2024-48906Sematell Replyone cross-site scripting6.1CISA ADP v3.10.3%2025-05-01
CVE-2024-48905Sematell Replyone insecure permissions9.1CISA ADP v3.10.4%2025-05-01
CVE-2024-13845Gravity Forms WebHooks WordPress plugin server-side request forgery5.5v3.10.2%2025-05-01Fix
CVE-2024-13381Calculated Fields Form WordPress plugin Admin+ stored XSS4.8NVD v3.10.3%2025-05-01Fix
CVE-2024-11994APM Server insertion of sensitive information into log file5.7CNA v3.10.3%2025-05-01Fix
CVE-2024-11390Kibana unrestricted upload of file with dangerous type can lead to XSS5.4CNA v3.10.4%2025-05-01Fix
CVE-2024-47784ABB ANC unverified password change2.1CNA v4.00.2%2025-04-30Fix
CVE-2024-30146HCL Domino Leap is affected by improper access control4.1CNA v3.10.2%2025-04-30Fix
CVE-2024-30145HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-30Fix
CVE-2024-30115HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS)6.3CNA v3.10.2%2025-04-30Fix
CVE-2024-13943Tesla Model S Iris Modem QCMAP_ConnectionManager improper input validation sandbox escape7.8CNA v3.00.2%2025-04-30
CVE-2024-9877ABB ANC sensitive information submitted using GET method5.3CNA v4.00.2%2025-04-30Fix
CVE-2024-9876ABB ANC application is vulnerable to privilege escalation8.5CNA v4.00.3%2025-04-30Fix
CVE-2024-6032Tesla Model S Iris Modem ql_atfwd command injection code execution7.8CNA v3.00.5%2025-04-30
CVE-2024-6031Tesla Model S oFono AT command heap-based buffer overflow code execution7.8CNA v3.00.2%2025-04-30
CVE-2024-6030Tesla Model S oFono Unnecessary Privileges sandbox escape7.0CNA v3.00.2%2025-04-30
CVE-2024-6029Tesla Model S Iris Modem race condition Firewall Bypass5.0CNA v3.00.2%2025-04-30
CVE-2024-58099Linux kernel vmxnet3 XDP transmit path out-of-bounds write8.6CNA v3.10.3%2025-04-29Fix
CVE-2024-57698Modernwms improper preservation of permissions7.5CISA ADP v3.10.4%2025-04-29Exploit code
CVE-2024-12273Calculated Fields Form WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-04-29Fix
CVE-2024-32499Newforma Project Center Server code injection9.8v3.10.4%2025-04-28
CVE-2024-13688Admin and Site Enhancements (ASE) WordPress plugin password Protection bypass5.3CISA ADP v3.10.4%2025-04-28Fix
CVE-2024-12706SQL injection vulnerability discovered in OpenText™ Digital Asset Management2.1CNA v4.00.2%2025-04-28
CVE-2024-11922Fortra GoAnywhere MFT input validation vulnerability in Web client emails that do not go6.3CNA v3.10.2%2025-04-28Fix
CVE-2024-10635Proofpoint Enterprise Protection S/MIME attachment scanning improper input validation6.1CNA v3.10.3%2025-04-28Fix
CVE-2024-9771WP-Recall WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-04-28Fix
CVE-2024-52888For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.5.4CNA v3.10.2%2025-04-27Fix
CVE-2024-52887Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.3.5CNA v3.10.2%2025-04-27Fix
CVE-2024-53636Serosoft Academia Student Information System path traversal9.8v3.11.5%2025-04-26
CVE-2024-13812Anps Theme WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.4%2025-04-26Fix
CVE-2024-13808Xpro Elementor Addons - Pro WordPress plugin authenticated (Contributor+) remote code execution8.8v3.10.7%2025-04-26Fix
CVE-2024-57375Andamiro Pump It Up incorrect initialization2.4CNA v3.10.2%2025-04-25
CVE-2024-56156Halo vulnerable to stored XSS and RCE via file upload Bypass5.5CNA v4.00.8%2025-04-25Fix
CVE-2024-30152HCL SX is affected by usage of a weak cryptographic algorithm6.5CNA v3.10.2%2025-04-25Fix
CVE-2024-11917JobSearch WP Job Board WordPress plugin authentication bypass via Social Logins8.1CNA v3.10.5%2025-04-25
CVE-2024-6199Viasat RM5110 unauthenticated remote code execution7.7CNA v4.00.2%2025-04-25
CVE-2024-6198Viasat RM4100 SNORE interface unauthenticated remote code execution7.7CNA v4.00.3%2025-04-25Fix
CVE-2024-30148HCL Leap is affected by improper access control4.1CNA v3.10.3%2025-04-24Fix
CVE-2024-30147HCL Leap is affected by a cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-24Fix
CVE-2024-30127HCL Leap is affected by missing no cache headers3.2CNA v3.10.2%2025-04-24Fix
CVE-2024-30114HCL Leap is affected by a cross-site scripting (XSS)3.7CNA v3.10.2%2025-04-24Fix
CVE-2024-30113HCL Leap is affected by a cross-site scripting (XSS)6.3CNA v3.10.3%2025-04-24Fix
CVE-2024-13307Reales WP WordPress theme unauthorized access5.3CNA v3.10.3%2025-04-24
CVE-2024-12244Missing authorization in GitLab4.3CNA v3.10.3%2025-04-24Fix
CVE-2024-58251BusyBox escape sequence injection2.5CNA v3.10.2%2025-04-23Fix
CVE-2024-47829pnpm package store path shortening vulnerability6.5CNA v3.10.2%2025-04-23Fix
CVE-2024-22351IBM InfoSphere Information Server session fixation6.3CNA v3.10.2%2025-04-23Fix
CVE-2024-10306Red Hat Enterprise Linux 10 mod_proxy_cluster: Mod_proxy_cluster unauthorized mcmp requests5.4CNA v3.10.4%2025-04-23Fix
CVE-2024-58250Samba ppp untrusted search path9.3CNA v3.10.2%2025-04-22Fix
CVE-2024-53569Volmarg Personal Management System goal creation stored cross-site scripting5.4CISA ADP v3.10.2%2025-04-22
CVE-2024-53568Volmarg Personal Management System image upload stored cross-site scripting5.4CISA ADP v3.10.2%2025-04-22
CVE-2024-46899Hitachi Ops Center Common Services Analyzer viewpoint OVF default credentials7.1CNA v3.10.3%2025-04-22Fix
CVE-2024-46546NEXTU Fleta AX1500 stack-based buffer overflow7.3CISA ADP v3.10.5%2025-04-22
CVE-2024-40446Ctan Mimetex code injection9.8CISA ADP v3.10.8%2025-04-22Fix
CVE-2024-40445Ctan Mimetex forkosh Mime TeX path traversal7.3CISA ADP v3.10.6%2025-04-22Exploit code
CVE-2024-33452openresty Lua-nginx-module HTTP request smuggling7.7CISA ADP v3.10.8%2025-04-22Fix
CVE-2024-13569Front End Users WordPress plugin reflected XSS7.1CISA ADP v3.10.5%2025-04-22NucleiFix
CVE-2024-11299Memberpress WordPress plugin information disclosure7.5v3.10.3%2025-04-22Fix
CVE-2024-57394Qi'anxin Tianqing Endpoint Security Management System external control of a file path8.8CISA ADP v3.10.6%2025-04-21Exploit code
CVE-2024-42699OpenCMS cross-site scripting6.5CISA ADP v3.10.4%2025-04-21
CVE-2024-41446OpenCMS cross-site scripting (XSS)5.4CISA ADP v3.10.3%2025-04-21
CVE-2024-12863OpenText Content Management stored XSS in Discussions functionality5.6CNA v4.00.4%2025-04-21
CVE-2024-12862OpenText Content Server REST API allows users without permissions to remove external collaborators5.5CNA v4.00.3%2025-04-21
CVE-2024-12543OpenText Content Management barcode functionality improper workflow enforcement5.9CNA v4.00.3%2025-04-21
CVE-2024-13926WP-Syntax WordPress plugin Author+ Potential ReDoS7.5CISA ADP v3.10.5%2025-04-19
CVE-2024-57493Redox-os Redox improper resource release5.5CISA ADP v3.10.2%2025-04-18
CVE-2024-53591Seclore missing authorization9.8CISA ADP v3.10.7%2025-04-18
CVE-2024-49808IBM Sterling Connect:Direct Web Services improper authorization6.3CNA v3.10.3%2025-04-18Fix
CVE-2024-4608974CMS command injection6.3CISA ADP v3.10.6%2025-04-18
CVE-2024-45651IBM Sterling Connect:Direct Web Services session fixation6.3CNA v3.10.3%2025-04-18Fix
CVE-2024-41447Alkacon OpenCMS stored cross-site scripting (XSS)5.4CISA ADP v3.10.3%2025-04-18Exploit code
CVE-2024-29643Croogo host header injection9.1CISA ADP v3.10.6%2025-04-18
CVE-2024-13650Piotnet Addons For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-04-18
CVE-2024-56518hazelcast Management Center code injection9.8CISA ADP v3.11.0%2025-04-17
CVE-2024-55238OpenMetadata SQL injection8.8v3.10.6%2025-04-17
CVE-2024-55211Think Tk-rt-wr135g cookie reliance without validation8.4CISA ADP v3.10.3%2025-04-17Exploit code
CVE-2024-53924Pycel allows code injection via a crafted formula9.8CISA ADP v3.11.0%2025-04-17Exploit code
CVE-2024-42178HCL MyXalytics is affected by a failure to restrict URL access vulnerability2.5CNA v3.10.2%2025-04-17Fix
CVE-2024-42177HCL MyXalytics is affected by SSL∕TLS protocol affected with BREACH and LUCKY13 vulnerabilities2.6CNA v3.10.2%2025-04-17Fix
CVE-2024-40124Pydio cross-site scripting5.4CISA ADP v3.10.3%2025-04-17Fix
CVE-2024-13925Klarna Checkout for WooCommerce WordPress plugin DoS via excessive logging7.5CISA ADP v3.10.5%2025-04-17Fix
CVE-2024-12530OpenText Secure Content Manager Insecure Dynamic-Link Library (DLL) Load vulnerability7.0CNA v4.00.2%2025-04-17
CVE-2024-11924Email Subscribers WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-04-17Fix
CVE-2024-58249wxWidgets wxWebRequestCURL vulnerability3.7CNA v3.10.5%2025-04-16Fix
CVE-2024-58248nopCommerce race condition3.5CNA v3.10.4%2025-04-16Fix
CVE-2024-58097Linux kernel ath11k Wi-Fi driver monitor ring infinite loop5.5v3.10.2%2025-04-16Fix
CVE-2024-58096Linux kernel ath11k Wi-Fi driver monitor mode vulnerability8.8CNA v3.10.3%2025-04-16Fix
CVE-2024-58095Linux kernel JFS extent allocation vulnerability5.5v3.10.2%2025-04-16Fix
CVE-2024-58094Linux kernel JFS filesystem truncation vulnerability7.8CNA v3.10.2%2025-04-16Fix
CVE-2024-58093Linux kernel PCIe ASPM link state use-after-free7.8v3.10.2%2025-04-16Fix
CVE-2024-58092In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_legacy_tracking_ops->init() call in check_for_legacy_methods(). That will be handled in the caller (nfsd4_client_tracking_init()). Otherwise, we'll wind up cal5.5v3.10.2%2025-04-16Fix
CVE-2024-56736Apache HertzBeat: Server-side request forgery (SSRF) in Api Config Oss6.5CISA ADP v3.10.7%2025-04-16Fix
CVE-2024-55372Wallosapp Wallos external control of a file path9.8CISA ADP v3.10.6%2025-04-16
CVE-2024-55371Wallosapp Wallos external control of a file path9.8CISA ADP v3.10.6%2025-04-16
CVE-2024-53305benbusby whoogle-search command injection7.3CISA ADP v3.10.6%2025-04-16Fix
CVE-2024-53304LRQA Nettitude PoshC2 C2 server connection handling improper access control6.5CISA ADP v3.10.4%2025-04-16
CVE-2024-53303LRQA Nettitude PoshC2 upload_file function remote code execution8.8CISA ADP v3.10.9%2025-04-16
CVE-2024-52281Stored cross-site scripting vulnerability in Rancher UI8.9CNA v3.10.5%2025-04-16Fix
CVE-2024-40074oretnom23 Online ID Generator System cross-site scripting4.8CISA ADP v3.10.3%2025-04-16
CVE-2024-40073oretnom23 Online ID Generator System SQL injection9.8CISA ADP v3.10.5%2025-04-16
CVE-2024-40072oretnom23 Online ID Generator System SQL injection9.8CISA ADP v3.10.5%2025-04-16
CVE-2024-40071oretnom23 Online ID Generator System unrestricted file upload9.8CISA ADP v3.10.8%2025-04-16
CVE-2024-40070oretnom23 Online ID Generator System command injection5.1CISA ADP v3.10.3%2025-04-16
CVE-2024-40069oretnom23 Online ID Generator System cross-site scripting5.4CISA ADP v3.10.3%2025-04-16
CVE-2024-40068oretnom23 Online ID Generator System SQL injection5.9CISA ADP v3.10.2%2025-04-16
CVE-2024-22314IBM Storage Defender Resiliency service information disclosure5.9CNA v3.10.2%2025-04-16Fix
CVE-2024-22036Rancher remote code execution via Cluster/Node drivers9.1CNA v3.10.8%2025-04-16Fix
CVE-2024-13452Contact Form by Supsystic WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.3%2025-04-16Fix
CVE-2024-10680Form Maker by 10Web WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-04-16Fix
CVE-2024-50960Extron Sme 211 command injection7.2CISA ADP v3.12.4%2025-04-15
CVE-2024-49200Insyde Kernel out-of-bounds write6.4CISA ADP v3.10.5%2025-04-15Fix
CVE-2024-45712SolarWinds Serv-U Client-Side cross-site scripting2.6CNA v3.10.4%2025-04-15Fix
CVE-2024-44843steve improper authentication5.9CISA ADP v3.10.4%2025-04-15
CVE-2024-42200HCL BigFix Web Reports is potentially susceptible to a stored cross-site scripting (XSS) attack4.8CNA v4.00.2%2025-04-15Fix
CVE-2024-42193HCL BigFix Web Reports is susceptible to a man-in-the-middle (MITM) attack2.1CNA v4.00.3%2025-04-15Fix
CVE-2024-42189HCL BigFix Web Reports might be subject to a denial of service (DoS) attack5.6CNA v4.00.3%2025-04-15Fix
CVE-2024-36842Oncord+ Android Infotainment Systems ADB port remote command execution7.3CISA ADP v3.10.9%2025-04-15Exploit code
CVE-2024-13610Simple Social Media Share Buttons WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-04-15Fix
CVE-2024-13207Widget for Social Page Feeds WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-04-15Fix
CVE-2024-13177Symlink following in Netskope Client Postinstall script5.2CNA v4.00.2%2025-04-15Fix
CVE-2024-11084Perforce Helix ALM authentication error responses vulnerability6.3CNA v4.00.5%2025-04-15Fix
CVE-2024-49825IBM Robotic Process Automation session fixation6.3CNA v3.10.2%2025-04-14Fix
CVE-2024-49709SoftCOM iKSORIS session management session fixation4.4v3.10.2%2025-04-14Fix
CVE-2024-49708SoftCOM iKSORIS delivery address form stored cross-site scripting5.4v3.10.2%2025-04-14Fix
CVE-2024-49707SoftCOM iKSORIS password reset form reflected cross-site scripting6.1v3.10.2%2025-04-14Fix
CVE-2024-49706SoftCOM iKSORIS Internet Starter module open redirect6.1v3.10.3%2025-04-14Fix
CVE-2024-49705SoftCOM iKSORIS Internet Starter module denial of service6.5v3.10.3%2025-04-14Fix
CVE-2024-13598SoftCOM iKSORIS Internet Starter form fields reflected cross-site scripting6.1v3.10.2%2025-04-14Fix
CVE-2024-13597SoftCOM iKSORIS Internet Starter login form reflected cross-site scripting5.1CNA v4.00.4%2025-04-14Fix
CVE-2024-10090SoftCOM iKSORIS Internet Starter module reflected cross-site scripting6.1v3.10.2%2025-04-14Fix
CVE-2024-10089SoftCOM iKSORIS Internet Starter module stored cross-site scripting5.4v3.10.2%2025-04-14Fix
CVE-2024-10088SoftCOM iKSORIS Internet Starter module reflected cross-site scripting6.1v3.10.2%2025-04-14Fix
CVE-2024-10087SoftCOM iKSORIS Internet Starter module reflected cross-site scripting5.4v3.10.2%2025-04-14Fix
CVE-2024-9230PowerPress Podcasting WordPress plugin Author+ XSS via Podcast URL5.9CISA ADP v3.10.3%2025-04-14Fix
CVE-2024-56406Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes8.4CISA ADP v3.10.5%2025-04-13Fix
CVE-2024-13338Webcraftic Clearfy WordPress optimization plugin cross-site request forgery to Clear Cache4.3v3.10.1%2025-04-12Fix
CVE-2024-13337Clearfy Cache WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-04-12Fix
CVE-2024-52282Rancher Helm Applications may have sensitive values leaked6.2CNA v3.10.4%2025-04-11Fix
CVE-2024-52280SUSE Rancher users can issue watch commands for arbitrary resources7.7CNA v3.10.5%2025-04-11Fix
CVE-2024-51461IBM QRadar WinCollect Agent denial of service4.3CNA v3.10.4%2025-04-11Fix
CVE-2024-13861Sophos Taegis Endpoint Agent (Linux) Debian package component code injection7.8CNA v3.10.2%2025-04-11Fix
CVE-2024-11679Lenovo System x3550 M5 out-of-bounds read6.7CNA v4.00.2%2025-04-11Fix
CVE-2024-58136Yiiframework Yii improper protection of alternate path9.8v3.187.8%2025-04-10KEVNucleiKCVFix
CVE-2024-38865Checkmk livestatus command injection in RestAPI6.0CNA v4.00.9%2025-04-10Fix
CVE-2024-13909Accredible Certificates and Open Badges WordPress plugin SQL injection4.9CNA v3.10.3%2025-04-10Fix
CVE-2024-13896WP-GeSHi-Highlight WordPress plugin Author+ ReDoS6.5CISA ADP v3.10.5%2025-04-10
CVE-2024-13874Feedify Web Push Notifications for WordPress reflected XSS7.1CISA ADP v3.10.3%2025-04-10Fix
CVE-2024-11129Generation of error message containing sensitive information in GitLab6.3CNA v3.10.4%2025-04-10Fix
CVE-2024-10894Payment Forms for Paystack WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-04-10Fix
CVE-2024-55210TOTVS Framework (linha Protheus) authentication bypass by spoofing9.8CISA ADP v3.10.5%2025-04-09
CVE-2024-8243Plugin Upgrade Time Out WordPress plugin stored XSS via CSRF6.3CISA ADP v3.10.2%2025-04-09
CVE-2024-6860WP MultiTasking WordPress plugin Permalink Suffix update via CSRF4.3CISA ADP v3.10.2%2025-04-09
CVE-2024-6857WP MultiTasking WordPress plugin Header/Footer/Body Script update via CSRF4.3CISA ADP v3.10.2%2025-04-09
CVE-2024-55354Lucee Server reliance on untrusted input in a security decision8.8CNA v3.10.2%2025-04-08Fix
CVE-2024-54092Siemens Industrial Edge Device Kit weak authentication9.3CNA v4.00.7%2025-04-08Fix
CVE-2024-54025Fortinet FortiIsolator OS command injection6.5CNA v3.10.4%2025-04-08Fix
CVE-2024-54024Fortinet FortiIsolator OS command injection7.0CNA v3.11.2%2025-04-08Fix
CVE-2024-52981Elasticsearch vulnerable to stack overflow due to a Large Recursion4.9CNA v3.10.6%2025-04-08Fix
CVE-2024-52980Elasticsearch uncontrolled resource consumption6.5CNA v3.10.5%2025-04-08Fix
CVE-2024-52974Elastic Kibana crash6.5CNA v3.10.4%2025-04-08Fix
CVE-2024-52962Fortinet FortiAnalyzer log injection5.0CNA v3.10.5%2025-04-08Fix
CVE-2024-50565Fortinet FortiOS man-in-the-middle3.0CNA v3.10.4%2025-04-08Fix
CVE-2024-48887Fortinet FortiSwitch unverified password change9.3CNA v3.115.7%2025-04-08Emerging ThreatsExploit codeFix
CVE-2024-47261Axis Communications AXIS OS improper type validation4.3CNA v3.10.4%2025-04-08Fix
CVE-2024-46671Fortinet FortiWeb incorrect user management5.6CNA v3.10.4%2025-04-08Exploit codeFix
CVE-2024-41796Siemens SENTRON 7KT PAC1260 Data Manager unverified password change6.9CNA v4.00.4%2025-04-08
CVE-2024-41795Siemens SENTRON 7KT PAC1260 Data Manager cross-site request forgery6.9CNA v4.00.2%2025-04-08
CVE-2024-41794Siemens SENTRON 7KT PAC1260 Data Manager hard-coded credentials10.0CNA v4.00.6%2025-04-08
CVE-2024-41793Siemens SENTRON 7KT PAC1260 Data Manager missing authentication7.7CNA v4.00.5%2025-04-08
CVE-2024-41792Siemens SENTRON 7KT PAC1260 Data Manager path traversal9.2CNA v4.00.6%2025-04-08
CVE-2024-41791Siemens SENTRON 7KT PAC1260 Data Manager missing authentication6.9CNA v4.00.4%2025-04-08
CVE-2024-41790Siemens SENTRON 7KT PAC1260 Data Manager OS command injection9.4CNA v4.00.9%2025-04-08
CVE-2024-41789Siemens SENTRON 7KT PAC1260 Data Manager OS command injection9.4CNA v4.00.9%2025-04-08
CVE-2024-41788Siemens SENTRON 7KT PAC1260 Data Manager OS command injection9.4CNA v4.00.9%2025-04-08
CVE-2024-32122Fortinet FortiOS recoverable password storage2.1CNA v3.10.2%2025-04-08Fix
CVE-2024-26013Fortinet FortiProxy improper channel restriction7.1CNA v3.10.5%2025-04-08Fix
CVE-2024-13820Melhor Envio WordPress plugin unauthenticated sensitive information exposure via Hard-coded Hash5.3CNA v3.10.4%2025-04-08Fix
CVE-2024-12556Kibana prototype pollution can lead to code injection8.7CNA v3.10.5%2025-04-08Fix
CVE-2024-58127Huawei HarmonyOS access control vulnerability in the security verification module8.4CNA v3.10.2%2025-04-07Fix
CVE-2024-58126Huawei HarmonyOS access control vulnerability in the security verification module8.4CNA v3.10.2%2025-04-07Fix
CVE-2024-58125Huawei HarmonyOS access control vulnerability in the security verification module8.4CNA v3.10.2%2025-04-07Fix
CVE-2024-58124Huawei HarmonyOS access control vulnerability in the security verification module8.4CNA v3.10.2%2025-04-07Fix
CVE-2024-58116Huawei HarmonyOS buffer overflow vulnerability in the SVG parsing module of the ArkUI framework4.0CNA v3.10.2%2025-04-07Fix
CVE-2024-58115Huawei HarmonyOS buffer overflow vulnerability in the SVG parsing module of the ArkUI framework4.0CNA v3.10.2%2025-04-07Fix
CVE-2024-58113Huawei HarmonyOS vulnerability of improper resource management in the memory management module5.3CNA v3.10.4%2025-04-07Fix
CVE-2024-58112Huawei HarmonyOS uncaught exception7.5CNA v3.10.4%2025-04-07Fix
CVE-2024-58111Huawei HarmonyOS uncaught exception7.5CNA v3.10.4%2025-04-07Fix
CVE-2024-58110Huawei HarmonyOS buffer overflow vulnerability in the codec module4.6CNA v3.10.3%2025-04-07Fix
CVE-2024-58109Huawei HarmonyOS buffer overflow vulnerability in the codec module4.6CNA v3.10.3%2025-04-07Fix
CVE-2024-58108Huawei HarmonyOS buffer overflow vulnerability in the codec module4.6CNA v3.10.3%2025-04-07Fix
CVE-2024-58107Huawei HarmonyOS buffer overflow vulnerability in the codec module7.5CNA v3.10.4%2025-04-07Fix
CVE-2024-58106Huawei HarmonyOS buffer overflow vulnerability in the codec module4.6CNA v3.10.3%2025-04-07Fix
CVE-2024-49848Qualcomm Snapdragon use-after-free in DSP service6.7CNA v3.10.1%2025-04-07Fix
CVE-2024-46494Typecho A cross-site scripting5.4CISA ADP v3.10.3%2025-04-07
CVE-2024-45557Qualcomm Snapdragon use of out-of-range pointer offset in Trust Management Engine7.8CNA v3.10.1%2025-04-07Fix
CVE-2024-45556Qualcomm Snapdragon improper access control for Register interface in TZ firmware6.5CNA v3.10.1%2025-04-07Fix
CVE-2024-45552Qualcomm Snapdragon buffer over-read in Data Network Stack and Connectivity8.2CNA v3.10.3%2025-04-07Fix
CVE-2024-45551Qualcomm Snapdragon weak authentication in HLOS6.2CNA v3.10.1%2025-04-07Fix
CVE-2024-45549Qualcomm Snapdragon kernel MQ channel creation information disclosure7.7CNA v3.10.1%2025-04-07Fix
CVE-2024-45544Qualcomm Snapdragon use-after-free in Data Network Stack and Connectivity6.6CNA v3.10.1%2025-04-07Fix
CVE-2024-45543Qualcomm Snapdragon out-of-bounds write in Audio6.6CNA v3.10.1%2025-04-07Fix
CVE-2024-45540Qualcomm Snapdragon use-after-free in HLOS6.6CNA v3.10.1%2025-04-07Fix
CVE-2024-43067Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera7.8CNA v3.10.1%2025-04-07Fix
CVE-2024-43066Qualcomm Snapdragon use-after-free in HLOS7.8CNA v3.10.1%2025-04-07Fix
CVE-2024-43065Qualcomm Snapdragon exposed dangerous method or function in HLOS7.1CNA v3.10.1%2025-04-07Fix
CVE-2024-43058Qualcomm Snapdragon incorrect type conversion or cast in Multimedia Frameworks7.8CNA v3.10.1%2025-04-07Fix
CVE-2024-43046Qualcomm Snapdragon information exposure in TZ Secure OS5.5CNA v3.10.1%2025-04-07Fix
CVE-2024-38797TianoCore edk2 out-of-bounds read in HashPeImageByType4.6CNA v3.10.2%2025-04-07Fix
CVE-2024-33058Qualcomm Snapdragon insufficient granularity of access control in Core7.5CNA v3.10.1%2025-04-07Fix
CVE-2024-11859DLL search order hijacking in ESET products for Windows8.4CNA v4.02.1%2025-04-07
CVE-2024-11071Improper access control in DestinyECM7.7CNA v4.00.2%2025-04-07Fix
CVE-2024-58133chainmaker-go incorrect synchronization4.0CNA v3.10.3%2025-04-06Fix
CVE-2024-58132chainmaker-go incorrect synchronization4.0CNA v3.10.3%2025-04-06Fix
CVE-2024-58131FISCO-BCOS incorrect synchronization3.7NVD v3.10.3%2025-04-06
CVE-2024-58036Net::Dropbox::API for Perl uses insecure rand function for cryptographic functions5.5CISA ADP v3.10.3%2025-04-05Fix
CVE-2024-57868Web::API for Perl uses insecure rand function for cryptographic functions5.5CISA ADP v3.10.3%2025-04-05
CVE-2024-57835Amon2::Auth::Site::LINE versions for Perl uses insecure rand function for cryptographic functions5.5CISA ADP v3.10.3%2025-04-05
CVE-2024-56370Net::Xero for Perl uses insecure rand function for cryptographic functions6.5CISA ADP v3.10.3%2025-04-05
CVE-2024-52322WebService::Xero for Perl uses insecure rand function for cryptographic functions5.5CISA ADP v3.10.3%2025-04-05
CVE-2024-13776ZoomSounds WordPress plugin unauthorized access8.1CNA v3.10.3%2025-04-05
CVE-2024-13604KB Support WordPress plugin information disclosure7.5CNA v3.10.5%2025-04-05
CVE-2024-51800Homey WordPress theme privilege escalation9.8CNA v3.10.4%2025-04-04Fix
CVE-2024-42208HCL Connections is vulnerable to an information disclosure3.5CNA v3.10.3%2025-04-04Fix
CVE-2024-13898Simple Banner WordPress plugin authenticated (Administrator+) stored cross-site scripting4.4CNA v3.10.2%2025-04-04Fix
CVE-2024-13744Booster for WooCommerce - unauthenticated arbitrary file upload9.8v3.10.7%2025-04-04Fix
CVE-2024-13708Booster for WooCommerce - unauthenticated stored cross-site scripting7.2CNA v3.10.3%2025-04-04Fix
CVE-2024-13645TagDiv Composer WordPress plugin unauthenticated arbitrary PHP object Instantiation9.8CNA v3.10.7%2025-04-04Fix
CVE-2024-11235PHP reference counting in php_request_shutdown causes use-after-free9.2CNA v4.01.5%2025-04-04Fix
CVE-2024-56528Snowplow Stream Collector resource exhaustion7.5CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-53868Apache Traffic Server: Malformed chunked message body allows request smuggling7.5CISA ADP v3.10.7%2025-04-03Fix
CVE-2024-47217Snowplow Iglu Server authenticated endpoint denial of service6.5CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-47215Snowplow Snowbridge improper exception handling7.5CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-47214Snowplow Iglu Server denial of service7.5CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-47213Snowplow Enrich improper resource release7.5CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-47212Snowplow Iglu Server resource exhaustion7.5CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-45199insightsoftware Hive JDBC Driver JDBC URL parsing remote code execution8.8CISA ADP v3.10.6%2025-04-03
CVE-2024-45198insightsoftware Spark JDBC Driver JDBC URL parsing remote code execution8.8CISA ADP v3.10.6%2025-04-03
CVE-2024-22611openemr SQL injection9.8CISA ADP v3.16.3%2025-04-03
CVE-2024-13673Big Boom Directory WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-04-03Fix
CVE-2024-9416Modula Image Gallery WordPress plugin stored DOM-based cross-site scripting5.4v3.10.2%2025-04-03Fix
CVE-2024-4877OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges8.8CISA ADP v3.10.4%2025-04-03Fix
CVE-2024-56476IBM TXSeries for Multiplatforms information disclosure5.3CNA v3.10.3%2025-04-02Fix
CVE-2024-56475IBM TXSeries for Multiplatforms cross-site scripting5.4CNA v3.10.2%2025-04-02Fix
CVE-2024-56474IBM TXSeries for Multiplatforms cross-site request forgery4.3CNA v3.10.2%2025-04-02Fix
CVE-2024-56341IBM Content Navigator cross-site scripting5.4CNA v3.10.2%2025-04-02Fix
CVE-2024-50597STMicroelectronics X-CUBE-AZRTOS-F7 HTTP server PUT request functionality integer underflow7.5v3.10.8%2025-04-02
CVE-2024-50596STMicroelectronics X-CUBE-AZRTOS-F7 HTTP server PUT request functionality integer underflow7.5v3.10.8%2025-04-02
CVE-2024-50595STMicroelectronics X-CUBE-AZRTOS-F7 HTTP server PUT request functionality integer underflow7.5v3.10.8%2025-04-02
CVE-2024-50594STMicroelectronics X-CUBE-AZRTOS-F7 HTTP server PUT request functionality integer underflow7.5v3.10.8%2025-04-02
CVE-2024-50385STMicroelectronics X-CUBE-AZRTOS-F7 NetX Component HTTP server functionality denial of service7.5v3.10.8%2025-04-02
CVE-2024-50384STMicroelectronics X-CUBE-AZRTOS-F7 NetX Component HTTP server functionality denial of service7.5v3.10.8%2025-04-02
CVE-2024-45700Zabbix DoS vulnerability due to uncontrolled resource exhaustion6.0CNA v4.00.3%2025-04-02Fix
CVE-2024-45699Zabbix reflected XSS vulnerability in /Zabbix.php?action=export.valuemaps7.5CNA v4.00.4%2025-04-02Fix
CVE-2024-45064STMicroelectronics X-CUBE-AZRTOS-WL FileX Internal RAM interface functionality buffer overflow9.8v3.11.1%2025-04-02
CVE-2024-42325Zabbix excessive information returned by user.get2.1CNA v4.00.3%2025-04-02Fix
CVE-2024-39780Open Source Robotics Foundation Robot Operating System (ROS) use of unsafe yaml load in dynparam9.8NVD v3.10.4%2025-04-02Fix
CVE-2024-38392Pexip Infinity Connect resource loading vulnerability9.1CISA ADP v3.10.5%2025-04-02
CVE-2024-37917Pexip Infinity improper input validation7.5CISA ADP v3.10.5%2025-04-02
CVE-2024-36469User enumeration via timing attack in Zabbix web interface2.3CNA v4.00.3%2025-04-02Fix
CVE-2024-36465SQL injection in Zabbix API8.6CNA v4.039.9%2025-04-02Fix
CVE-2024-36337AMD Ryzen™ AI Software integer overflow7.9CNA v3.10.2%2025-04-02
CVE-2024-36336AMD Ryzen™ AI Software integer overflow7.9CNA v3.10.2%2025-04-02
CVE-2024-36328AMD Ryzen™ AI Software integer overflow7.3CNA v3.10.2%2025-04-02
CVE-2024-25051IBM Jazz Reporting Service insufficient session expiration6.6CNA v3.10.4%2025-04-02Fix
CVE-2024-13637Demo Awesome WordPress plugin missing authorization to authenticated (Subscriber+) plugin activation6.5CNA v3.10.4%2025-04-02
CVE-2024-12410Front End Users WordPress plugin authenticated (Admin+) SQL injection4.9v3.10.4%2025-04-02Fix
CVE-2024-56325Apache Pinot vulnerable to authentication bypass9.8CISA ADP v3.180.2%2025-04-01NucleiEmerging ThreatsFix
CVE-2024-13941ouch-org ouch zip.rs convert_zip_date_time memory corruption4.8CNA v4.00.3%2025-04-01Fix
CVE-2024-13567Awesome Support WordPress HelpDesk and Support plugin unauthenticated sensitive information exposure7.5CNA v3.10.6%2025-04-01Fix
CVE-2024-13553SMS Alert Order Notifications WordPress plugin privilege escalation9.8v3.10.5%2025-04-01Fix
CVE-2024-12278Booster for WooCommerce WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.3%2025-04-01Fix
CVE-2024-12189WDesignKit WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-01Fix
CVE-2024-55093phpipam cross-site scripting4.7v3.10.2%2025-03-31
CVE-2024-54809NETGEAR WNR854T stack-based buffer overflow9.8CISA ADP v3.10.7%2025-03-31
CVE-2024-54808NETGEAR WNR854T stack-based buffer overflow9.8CISA ADP v3.10.8%2025-03-31
CVE-2024-54807NETGEAR WNR854T code injection9.8CISA ADP v3.12.5%2025-03-31
CVE-2024-54806NETGEAR WNR854T code injection9.8CISA ADP v3.11.1%2025-03-31
CVE-2024-54805NETGEAR WNR854T code injection9.8CISA ADP v3.12.5%2025-03-31
CVE-2024-54804NETGEAR WNR854T code injection9.8CISA ADP v3.11.7%2025-03-31
CVE-2024-54803NETGEAR WNR854T code injection9.8CISA ADP v3.11.7%2025-03-31
CVE-2024-54802NETGEAR WNR854T command injection9.8CISA ADP v3.10.7%2025-03-31
CVE-2024-54533Apple macOS insecure permissions7.0CISA ADP v3.10.7%2025-03-31Fix
CVE-2024-40864Apple macOS information disclosure2.7CISA ADP v3.10.6%2025-03-31Fix
CVE-2024-24456HPE Athonet Core buffer overflow5.9CNA v3.10.4%2025-03-31
CVE-2024-12021Black Duck Coverity stored cross-site scripting8.5CNA v4.00.4%2025-03-31Fix
CVE-2024-13804HPE Insight Cluster Management Utility (CMU) Unauthenticated remote code execution9.8CISA ADP v3.10.5%2025-03-30
CVE-2024-55895IBM InfoSphere Information Server information disclosure2.7CNA v3.10.4%2025-03-29Fix
CVE-2024-51477IBM InfoSphere Information Server information disclosure4.3CNA v3.10.3%2025-03-29Fix
CVE-2024-43186IBM InfoSphere Information Server information disclosure5.3CNA v3.10.3%2025-03-29Fix
CVE-2024-13557Shortcodes by United Themes WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.3%2025-03-29Fix
CVE-2024-11180ElementsKit Elementor addons WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-29Fix
CVE-2024-7577IBM InfoSphere Information Server information disclosure4.4CNA v3.10.3%2025-03-29Fix
CVE-2024-58130MISP cross-site scripting6.1NVD v3.10.2%2025-03-28Fix
CVE-2024-58129MISP cross-site scripting4.8v3.10.2%2025-03-28Fix
CVE-2024-58128MISP cross-site scripting4.8v3.10.2%2025-03-28Fix
CVE-2024-57083Redoc prototype pollution via `Module.mergeObjects` component7.5CISA ADP v3.10.5%2025-03-28Fix
CVE-2024-56975InvoicePlane unrestricted file upload9.8CISA ADP v3.10.7%2025-03-28
CVE-2024-54362GetShop ecommerce WordPress plugin path traversal8.1CNA v3.10.5%2025-03-28
CVE-2024-54291PluginPass WordPress plugin arbitrary file download/Delete8.6CNA v3.10.5%2025-03-28
CVE-2024-51624Já-Já Pagamentos for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-03-28
CVE-2024-49601Dell Unity OS command injection7.3CNA v3.11.5%2025-03-28Fix
CVE-2024-49565Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2024-49564Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2024-49563Dell Unity OS command injection7.8CNA v3.10.6%2025-03-28Fix
CVE-2024-48615libarchive null pointer dereference7.5CISA ADP v3.10.5%2025-03-28Fix
CVE-2024-39311Publify vulnerable to cross-site scripting (XSS) via Redirects Requiring User Interaction1.8CNA v4.00.3%2025-03-28Fix
CVE-2024-38988@Alizeait/Unflatto prototype pollution9.8CISA ADP v3.10.9%2025-03-28Fix
CVE-2024-38985Depath and cool-path vulnerable to prototype pollution via `set` method9.8CISA ADP v3.10.8%2025-03-28
CVE-2024-24292Aliconnect Software Development Kit prototype pollution9.8CISA ADP v3.10.8%2025-03-28
CVE-2024-13939String::Compare::ConstantTime timing side channel7.5CISA ADP v3.10.4%2025-03-28Fix
CVE-2024-12619Insufficient granularity of access control in GitLab5.2CNA v3.10.3%2025-03-28Fix
CVE-2024-11504SQL injection in Streamsoft Prestiż8.6CNA v4.00.4%2025-03-28Fix
CVE-2024-10307Allocation of resources without limits or throttling in GitLab4.3CNA v3.10.3%2025-03-28Fix
CVE-2024-7407Weak password encoding in Streamsoft Prestiż8.2CNA v4.00.4%2025-03-28Fix
CVE-2024-6875Red Hat Data Grid 8 infinispan: Infinispan: Rest compare API has buffer leak6.5CNA v3.10.5%2025-03-28
CVE-2024-58091Linux kernel fbdev-dma driver null pointer dereference7.8CNA v3.10.2%2025-03-27Fix
CVE-2024-58090Linux kernel CPU scheduler vulnerability5.5v3.10.2%2025-03-27Fix
CVE-2024-56469IBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authentication6.3CNA v3.10.3%2025-03-27Fix
CVE-2024-55073mealie missing authorization7.6CISA ADP v3.10.3%2025-03-27
CVE-2024-55072mealie missing authorization5.4CISA ADP v3.10.3%2025-03-27
CVE-2024-55070mealie missing authorization3.1CISA ADP v3.10.3%2025-03-27
CVE-2024-48944Apache Kylin: SSRF vulnerability in the diagnosis API6.5CISA ADP v3.10.6%2025-03-27Fix
CVE-2024-45361Mi Connect Service APP protocol flaws lead to leaking sensitive user information6.5CNA v3.10.2%2025-03-27
CVE-2024-45356Xiaomi phone framework has unauthorized access7.3CNA v3.10.2%2025-03-27
CVE-2024-45355Xiaomi phone framework has unauthorized access5.5CNA v3.10.1%2025-03-27
CVE-2024-45354Xiaomi shop application Webview has code execution4.3CNA v3.10.2%2025-03-27
CVE-2024-45353quick App has intent redriction vulnerability4.3CNA v3.10.2%2025-03-27
CVE-2024-45352Xiaomi smarthome application Webview has code execution8.8CNA v3.10.3%2025-03-27Exploit code
CVE-2024-12905Tar-fs vulnerable to link following and path traversal via Extracting a Crafted tar file7.5CNA v3.12.3%2025-03-27Exploit codeFix
CVE-2024-9773Improper neutralization of special elements used in a command (command injection) in GitLab3.7CNA v3.10.2%2025-03-27Fix
CVE-2024-55965Appsmith incorrect authorization6.5CISA ADP v3.10.4%2025-03-26Fix
CVE-2024-55964Appsmith code injection9.8CISA ADP v3.16.8%2025-03-26MetasploitExploit codeFix
CVE-2024-55963Appsmith denial of service6.5CISA ADP v3.130.7%2025-03-26Reported exploitedEmerging ThreatsExploit codeFix
CVE-2024-47516Pagure: Argument injection in pagurerepo.log9.8CNA v3.10.9%2025-03-26Fix
CVE-2024-45351Game center application has code execution7.8CNA v3.10.2%2025-03-26
CVE-2024-41643Arris NVG443B cshell login code injection6.8CISA ADP v3.10.3%2025-03-26
CVE-2024-30155HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability5.5CNA v3.10.2%2025-03-26Fix
CVE-2024-13889WordPress Importer plugin authenticated (Administrator+) PHP object injection7.2CNA v3.10.8%2025-03-26Fix
CVE-2024-13801BWL Advanced FAQ Manager WordPress plugin unauthorized access8.1CNA v3.10.3%2025-03-26Fix
CVE-2024-13702CRM and Lead Management by vcita WordPress plugin stored cross-site scripting5.4v3.10.2%2025-03-26Fix
CVE-2024-13411Zapier for WordPress plugin blind server-side request forgery6.4CNA v3.10.3%2025-03-26Fix
CVE-2024-13146Booknetic WordPress plugin Staff creation via CSRF8.8CISA ADP v3.10.2%2025-03-26Fix
CVE-2024-12683Smart Maintenance Mode WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-26Fix
CVE-2024-11847WP SVG Upload WordPress plugin Author+ stored XSS via SVG4.8CISA ADP v3.10.3%2025-03-26
CVE-2024-58105Trend Micro Apex One incorrect user management7.3CNA v3.10.2%2025-03-25Fix
CVE-2024-58104Trend Micro Apex One improper privilege management7.3CNA v3.10.2%2025-03-25Fix
CVE-2024-55604Appsmith's broken access control allows Viewer Role User to Query Datasources4.8CNA v4.00.2%2025-03-25Fix
CVE-2024-55030nasa fprime Command Dispatcher service command injection9.8CISA ADP v3.11.8%2025-03-25
CVE-2024-55029nasa fprime cross-site scripting6.1CISA ADP v3.10.3%2025-03-25
CVE-2024-55028nasa fprime Dashboard server-side template injection9.8CISA ADP v3.10.8%2025-03-25
CVE-2024-53679Apache VCL: XSS vulnerability in User Lookup impacting user privileges8.4CNA v4.00.5%2025-03-25Fix
CVE-2024-53678Apache VCL: SQL injection vulnerability in New Block Allocation form5.1CNA v4.00.6%2025-03-25Fix
CVE-2024-48818IIT Bombay Bodhitree code injection9.8CISA ADP v3.10.9%2025-03-25
CVE-2024-45484Enabled ICMP redirection in B&R APROL7.2CNA v4.00.2%2025-03-25Fix
CVE-2024-45483Missing GRUB password in B&R APROL7.0CNA v4.00.2%2025-03-25Fix
CVE-2024-45482Privilege escalation in B&R APROL8.5CNA v4.00.1%2025-03-25Fix
CVE-2024-45481Improper authentication in SSH of B&R APROL8.5CNA v4.00.1%2025-03-25Fix
CVE-2024-45480Unauthorized local file reading in B&R APROL9.2CNA v4.00.4%2025-03-25Fix
CVE-2024-44903SirsiDynix IPAC20 SQL injection7.5CNA v3.10.4%2025-03-25Fix
CVE-2024-42533authentication module in Convivance StandVoice SQL injection9.8CISA ADP v3.10.7%2025-03-25
CVE-2024-31896IBM SPSS Statistics information disclosure5.9CNA v3.10.2%2025-03-25Fix
CVE-2024-13863Stylish Google Sheet Reader WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-13731Alert Box Block Display notice/alerts in the front end WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-25Fix
CVE-2024-13710Estatebud Properties and Listings WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.1%2025-03-25
CVE-2024-13690WP Church Donation WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2025-03-25
CVE-2024-13618Downloable by American Osteopathic Association WordPress plugin unauthenticated SSRF7.2CISA ADP v3.10.3%2025-03-25
CVE-2024-13617American Osteopathic Association Downloadable download function vulnerability8.6CISA ADP v3.10.5%2025-03-25
CVE-2024-13123AFI WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-13122AFI WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-13118IP Based Login WordPress plugin Log deletion via CSRF4.3CISA ADP v3.10.2%2025-03-25Fix
CVE-2024-12769Simple Banner WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-12682Smart Maintenance Mode WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-12623DICOM Support WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-25Fix
CVE-2024-12169Hitachi Energy RTU500 IEC 60870-5-104 controlled station vulnerability8.7CNA v4.00.4%2025-03-25Fix
CVE-2024-12109Product Labels For Woocommerce WordPress plugin Admin+ SQLi4.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-11503WP Tabs WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-11499Hitachi Energy RTU500 null pointer dereference6.9CNA v4.00.2%2025-03-25Fix
CVE-2024-11273Contact Form and SMTP Plugin for WordPress by PirateForms Admin+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-11272Contact Form and SMTP Plugin for WordPress by PirateForms Admin+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10703Registrations for The Events Calendar WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10679Quiz and Survey Master (QSM) WordPress plugin Author+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10638Product Labels For Woocommerce WordPress plugin Admin+ SQLi4.1CISA ADP v3.10.4%2025-03-25Fix
CVE-2024-10566Slider by 10Web WordPress plugin Contributor+ stored XSS6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10565Slider by 10Web WordPress plugin Admin+ stored XSS via widget6.1CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10560Form Maker by 10Web WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10554WP-Advanced-Search WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10472Stylish Price List WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10210Path traversal in APROL Web portal8.4CNA v4.00.4%2025-03-25Fix
CVE-2024-10209Incorrect permission assignment in APROL file system8.5CNA v4.00.1%2025-03-25Fix
CVE-2024-10208Cross-site scripting vulnerability in APROL Web portal5.1CNA v4.00.4%2025-03-25Fix
CVE-2024-10207Server-side request forgery (authenticated) in APROL Web portal5.3CNA v4.00.4%2025-03-25Fix
CVE-2024-10206Server-side request forgery (unauthenticated) in APROL Web portal6.9CNA v4.00.4%2025-03-25Fix
CVE-2024-10105Jobs for WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-10037Hitachi Energy RTU500 null pointer dereference5.9CNA v4.00.3%2025-03-25Fix
CVE-2024-9770WP-Recall WordPress plugin Admin+ SQL injection4.7CISA ADP v3.10.3%2025-03-25Fix
CVE-2024-8315Improper handling of insufficient permissions or privileges in B&R APROL6.8CNA v4.00.1%2025-03-25Fix
CVE-2024-8314Improper session handling in B&R APROL5.5CNA v4.00.4%2025-03-25Fix
CVE-2024-8313Default or Guessable SNMP community names in B&R APROL8.7CNA v4.00.2%2025-03-25Fix
CVE-2024-55279Uguu cross-site scripting6.0CISA ADP v3.10.3%2025-03-24
CVE-2024-13124Photo Gallery by 10Web WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-24Fix
CVE-2024-10558Form Maker by 10Web WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-24Fix
CVE-2024-9103Forcepoint Email Security persistent XSS in blocked messages6.1CNA v3.10.2%2025-03-24
CVE-2024-8774Privilege escalation in Simple.ERP7.7CNA v4.00.3%2025-03-24Fix
CVE-2024-8773Protocol Downgrade in Simple.ERP8.3CNA v4.00.4%2025-03-24Fix
CVE-2024-13856Your Friendly Drag and Drop Page Builder WordPress plugin server-side request forgery6.4CNA v3.10.3%2025-03-22Fix
CVE-2024-13768CITS Support svg WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-03-22
CVE-2024-13739Newsletters WordPress plugin reflected cross-site scripting via to parameter6.1v3.10.2%2025-03-22Fix
CVE-2024-13737Motors WordPress plugin unauthorized access4.3v3.10.3%2025-03-22Fix
CVE-2024-13666Fluent Forms WordPress plugin spoofing5.3CNA v3.10.3%2025-03-22Fix
CVE-2024-57490Ioffice20 improper authentication7.7CISA ADP v3.10.4%2025-03-21
CVE-2024-54564Apple macOS incorrect default permissions6.5CISA ADP v3.10.4%2025-03-21Fix
CVE-2024-54551Apple Safari denial of service7.5CISA ADP v3.10.6%2025-03-21Fix
CVE-2024-53351PipeCD vulnerable to privilege escalation9.8CISA ADP v3.10.5%2025-03-21
CVE-2024-53350Kubeslice insecure permissions7.4CISA ADP v3.10.4%2025-03-21
CVE-2024-53349Linux Foundation Kuadrant insecure permissions7.4CISA ADP v3.10.4%2025-03-21
CVE-2024-53348Loxilb information disclosure7.4CISA ADP v3.10.3%2025-03-21
CVE-2024-50053ManageEngine ServiceDesk Plus stored XSS6.3CNA v3.11.1%2025-03-21Fix
CVE-2024-44305Apple macOS incorrect authorization7.8CISA ADP v3.10.2%2025-03-21Fix
CVE-2024-44199Apple macOS out-of-bounds read7.1CISA ADP v3.10.2%2025-03-21Fix
CVE-2024-13903quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow7.5v3.10.7%2025-03-21Fix
CVE-2024-57440D-Link Dsl-3788 stack-based buffer overflow7.5CISA ADP v3.10.8%2025-03-20Fix
CVE-2024-54016Compression bomb attack in Apache Seata Server4.3CISA ADP v3.10.6%2025-03-20Fix
CVE-2024-48591Inflectra Spirateam cross-site scripting6.1CISA ADP v3.10.4%2025-03-20
CVE-2024-48590Inflectra Spirateam server-side request forgery9.8CISA ADP v3.10.8%2025-03-20
CVE-2024-47552Apache Seata (incubating): Deserialization of untrusted data in jraft mode in Apache Seata Server9.8CISA ADP v3.11.2%2025-03-20Fix
CVE-2024-13923Order Export and Order Import for WooCommerce WordPress plugin server-side request forgery6.5NVD v3.10.4%2025-03-20Fix
CVE-2024-13922Order Export and Order Import for WooCommerce WordPress plugin arbitrary file deletion6.5v3.10.4%2025-03-20Fix
CVE-2024-13921Order Export and Order Import for WooCommerce WordPress plugin PHP object injection7.2v3.10.7%2025-03-20Fix
CVE-2024-13920Order Export and Order Import for WooCommerce WordPress plugin path traversal4.9v3.10.7%2025-03-20Fix
CVE-2024-13881Gunnettmd Link My Posts reflected cross-site scripting7.1CISA ADP v3.10.3%2025-03-20
CVE-2024-13880My Quota WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-20
CVE-2024-13878SpotBot WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-20
CVE-2024-13877Passbeemedia Web Push Notifications WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-20
CVE-2024-13876Meintopf WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-20
CVE-2024-13875Mantus667 WP-PManager reflected cross-site scripting7.1CISA ADP v3.10.3%2025-03-20
CVE-2024-13558NP Quote Request for WooCommerce WordPress plugin insecure direct object reference5.3NVD v3.10.4%2025-03-20Fix
CVE-2024-13060Improper authorization in mintplex-labs/anything-llm4.3v3.10.5%2025-03-20Fix
CVE-2024-12911SQL injection in run-llama/llama_index7.1CNA v3.00.5%2025-03-20Fix
CVE-2024-12910Denial of service in run-llama/llama_index5.9v3.10.7%2025-03-20Fix
CVE-2024-12909SQL injection to RCE in run-llama/llama_index9.8v3.11.4%2025-03-20Fix
CVE-2024-12886Ollama vulnerable to denial of service (DoS) via Crafted GZIP7.5CNA v3.00.7%2025-03-20Exploit codeFix
CVE-2024-12882SSRF in comfyanonymous/ComfyUI7.5CNA v3.00.8%2025-03-20
CVE-2024-12880Partial account takeover due to Insecure Data Querying in infiniflow/ragflow6.5NVD v3.10.7%2025-03-20
CVE-2024-12871Stored cross-site scripting (XSS) in infiniflow/ragflow5.4v3.10.4%2025-03-20
CVE-2024-12870Stored cross-site scripting (XSS) in infiniflow/ragflow5.4CNA v3.00.5%2025-03-20
CVE-2024-12869Improper authentication in infiniflow/ragflow4.3v3.10.5%2025-03-20
CVE-2024-12866Local file inclusion in netease-youdao/QAnything7.5v3.11.5%2025-03-20
CVE-2024-12864Unauthenticated DoS by Sending Large Filename at file upload endpoint in netease-youdao/QAnything7.5CNA v3.00.9%2025-03-20
CVE-2024-12779SSRF in infiniflow/ragflow7.5v3.10.6%2025-03-20
CVE-2024-12778Denial of service in aimhubio/aim7.5CNA v3.00.8%2025-03-20
CVE-2024-12777Denial of service in aimhubio/aim5.9CNA v3.00.5%2025-03-20
CVE-2024-12776Authentication bypass in langgenius/dify8.1CNA v3.00.7%2025-03-20
CVE-2024-12775SSRF in langgenius/dify6.5CNA v3.00.6%2025-03-20
CVE-2024-12766SSRF in parisneo/lollms-webui7.5CNA v3.00.7%2025-03-20
CVE-2024-12761Denial of service in brycedrennan/imaginairy7.5CNA v3.00.7%2025-03-20
CVE-2024-12720Regular expression denial of service (ReDoS) in huggingface/Transformers7.5v3.10.7%2025-03-20Fix
CVE-2024-12704Denial of service (DoS) in run-llama/llama_index7.5CNA v3.00.8%2025-03-20Fix
CVE-2024-12580Logs Debug injection in danny-avila/LibreChat5.3v3.10.5%2025-03-20Fix
CVE-2024-12450RCE, full read SSRF, and arbitrary file read in infiniflow/ragflow9.8v3.11.3%2025-03-20Fix
CVE-2024-12433Remote code execution in infiniflow/ragflow9.8CNA v3.01.7%2025-03-20Fix
CVE-2024-12392Server-side request forgery (SSRF) in binary-husky/gpt_academic6.5CNA v3.00.6%2025-03-20
CVE-2024-12391Regular expression denial of service (ReDoS) in binary-husky/gpt_academic6.5CNA v3.00.9%2025-03-20
CVE-2024-12390Remote code execution in binary-husky/gpt_academic8.8CNA v3.01.7%2025-03-20
CVE-2024-12389Path traversal in binary-husky/gpt_academic8.8CNA v3.01.7%2025-03-20
CVE-2024-12388Regular expression denial of service (ReDoS) in binary-husky/gpt_academic6.5CNA v3.00.7%2025-03-20
CVE-2024-12387Improper input validation in binary-husky/gpt_academic6.5CNA v3.00.7%2025-03-20
CVE-2024-12376Server side request forgery in lm-sys/fastchat7.5CNA v3.00.7%2025-03-20
CVE-2024-12375Local file inclusion in automatic1111/stable-diffusion-webui6.5CNA v3.00.8%2025-03-20
CVE-2024-12374Stored XSS in automatic1111/stable-diffusion-webui6.1v3.10.4%2025-03-20
CVE-2024-12217Path traversal in gradio-app/gradio5.3CNA v3.00.7%2025-03-20
CVE-2024-12216Arbitrary file write via TarSlip in dmlc/gluon-cv7.1CNA v3.00.3%2025-03-20
CVE-2024-12215Remote code execution in kedro-org/kedro8.8CNA v3.01.1%2025-03-20
CVE-2024-12074Denial of service in automatic1111/stable-diffusion-webui6.5CNA v3.00.8%2025-03-20
CVE-2024-12070Denial of service in haotian-liu/llava7.5CNA v3.00.9%2025-03-20
CVE-2024-12068Server-side request forgery in haotian-liu/Llava7.5CNA v3.00.7%2025-03-20
CVE-2024-12065Local file inclusion in haotian-liu/Llava7.5CNA v3.00.9%2025-03-20
CVE-2024-12063Denial of service in imartinez/PrivateGPT7.5CNA v3.00.8%2025-03-20
CVE-2024-12055DoS using malicious gguf model file in Ollama/Ollama7.5v3.10.8%2025-03-20
CVE-2024-12048IDOR vulnerability in TransformerOptimus/Superagi8.8CNA v3.00.7%2025-03-20
CVE-2024-12044Remote code execution by Pickle deserialization in open-mmlab/mmdetection9.8CNA v3.01.3%2025-03-20
CVE-2024-12039Improper restriction of excessive authentication attempts in langgenius/dify8.1v3.10.7%2025-03-20
CVE-2024-12029Remote code execution via Model deserialization in invoke-ai/invokeai9.8CNA v3.06.0%2025-03-20MetasploitExploit codeFix
CVE-2024-12016SQLi in CM Informatics' CM News9.8CNA v3.10.4%2025-03-20
CVE-2024-11958SQL injection in run-llama/llama_index9.8CNA v3.01.4%2025-03-20Fix
CVE-2024-11850Stored XSS in langgenius/dify5.4v3.10.4%2025-03-20
CVE-2024-11824Stored XSS in langgenius/dify7.6v3.10.5%2025-03-20Fix
CVE-2024-11822Server-side request forgery (SSRF) in langgenius/Dify7.5v3.10.6%2025-03-20
CVE-2024-11821Privilege escalation in langgenius/dify4.3CNA v3.00.5%2025-03-20
CVE-2024-11603Server-side request forgery in lm-sys/fastchat7.5CNA v3.00.7%2025-03-20
CVE-2024-11602Feast Cross-Origin Resource Sharing vulnerability7.4CNA v3.00.3%2025-03-20
CVE-2024-11449Server-side request forgery in haotian-liu/llava7.5CNA v3.00.7%2025-03-20
CVE-2024-11441Stored XSS in Serge in serge-chat/serge6.1CNA v3.00.4%2025-03-20
CVE-2024-11302Missing check_access in lollms_binding_infos in parisneo/lollms8.0CNA v3.00.2%2025-03-20
CVE-2024-11301Improper Enforcement of Unique Constraint in lunary-ai/Lunary6.5CNA v3.00.6%2025-03-20Fix
CVE-2024-11300Improper access control in lunary-ai/Lunary6.5NVD v3.10.7%2025-03-20Fix
CVE-2024-11173Unhandled exception in danny-avila/LibreChat6.5CNA v3.00.9%2025-03-20Fix
CVE-2024-11172Denial of service in danny-avila/LibreChat7.5CNA v3.00.9%2025-03-20Fix
CVE-2024-11171Improper input validation in danny-avila/LibreChat7.5CNA v3.00.5%2025-03-20Fix
CVE-2024-11170Path traversal in danny-avila/LibreChat8.8CNA v3.01.8%2025-03-20Fix
CVE-2024-11169Unhandled exception leading to server crash in danny-avila/LibreChat7.5CNA v3.00.9%2025-03-20Fix
CVE-2024-11167Improper access control in danny-avila/LibreChat5.3NVD v3.10.5%2025-03-20Fix
CVE-2024-11137IDOR vulnerability in PATCH `/v1/runs/:id/score` endpoint in lunary-ai/Lunary7.5CNA v3.00.6%2025-03-20Fix
CVE-2024-11045Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui9.6CNA v3.00.4%2025-03-20
CVE-2024-11044Open redirect in automatic1111/stable-diffusion-webui6.1CNA v3.00.8%2025-03-20Nuclei
CVE-2024-11043Denial of service (DoS) via Large Payload in Board Name field in invoke-ai/invokeai7.5CNA v3.00.7%2025-03-20
CVE-2024-11042Arbitrary file delete in invoke-ai/invokeai9.1CNA v3.01.5%2025-03-20Exploit codeFix
CVE-2024-11041Remote code execution in vllm-project/vLLM9.8CNA v3.01.6%2025-03-20
CVE-2024-11039Deserialization of untrusted data in binary-husky/gpt_academic8.8CNA v3.02.1%2025-03-20Fix
CVE-2024-11037Path traversal in binary-husky/gpt_academic6.5CNA v3.01.1%2025-03-20
CVE-2024-11033Denial of service (DoS) in binary-husky/gpt_academic6.5v3.10.7%2025-03-20
CVE-2024-11031SSRF in binary-husky/gpt_academic7.5v3.10.6%2025-03-20
CVE-2024-11030SSRF in binary-husky/gpt_academic7.5v3.10.6%2025-03-20
CVE-2024-10986Local File Read (LFI) by Tarslip Symlink via arxiv_download API in binary-husky/gpt_academic8.8CNA v3.00.8%2025-03-20
CVE-2024-10956Cross-Site WebSocket Hijacking in binary-husky/gpt_academic7.1v3.10.3%2025-03-20
CVE-2024-10955ReDoS (regular expression denial of service) in gaizhenbiao/ChuanhuChatGPT6.5CNA v3.00.7%2025-03-20
CVE-2024-10954Prompt injection leading to RCE in binary-husky/gpt_academic plugin `manim`8.8CNA v3.01.5%2025-03-20
CVE-2024-10950Code injection in binary-husky/gpt_academic8.8CNA v3.01.5%2025-03-20
CVE-2024-10948Arbitrary file read via upload function in binary-husky/gpt_academic6.5CNA v3.00.8%2025-03-20
CVE-2024-10940Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain5.3CNA v3.00.4%2025-03-20Fix
CVE-2024-10935Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui7.5CNA v3.00.8%2025-03-20
CVE-2024-10912Denial of service in lm-sys/fastchat7.5CNA v3.00.6%2025-03-20
CVE-2024-10908Open redirect in lm-sys/fastchat6.1CNA v3.00.8%2025-03-20Nuclei
CVE-2024-10907Denial of service (DoS) via Multipart Boundary in lm-sys/fastchat7.5CNA v3.00.7%2025-03-20
CVE-2024-10906Cross-site request forgery (CSRF) in eosphoros-ai/db-gpt8.1v3.10.2%2025-03-20
CVE-2024-10902Arbitrary file upload with path traversal in eosphoros-ai/db-gpt9.8v3.11.3%2025-03-20
CVE-2024-10901Arbitrary file write via DuckDB SQL injection in eosphoros-ai/db-gpt9.8v3.11.1%2025-03-20
CVE-2024-10835Arbitrary file write via SQL injection in eosphoros-ai/db-gpt9.8v3.11.2%2025-03-20Fix
CVE-2024-10834Arbitrary file write in eosphoros-ai/db-gpt9.1CNA v3.00.6%2025-03-20
CVE-2024-10833Arbitrary file write in eosphoros-ai/db-gpt9.1CNA v3.00.8%2025-03-20Fix
CVE-2024-10831Arbitrary file write through absolute path traversal in eosphoros-ai/db-gpt9.1CNA v3.00.8%2025-03-20
CVE-2024-10830Path traversal in eosphoros-ai/db-gpt8.2CNA v3.00.7%2025-03-20
CVE-2024-10829Denial of service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt7.5CNA v3.00.7%2025-03-20Exploit code
CVE-2024-10821Denial of service (DoS) in invoke-ai/invokeai7.5CNA v3.00.6%2025-03-20Exploit code
CVE-2024-10819CSRF to XSS in binary-husky/gpt_academic8.8v3.10.2%2025-03-20
CVE-2024-10812Open redirect in binary-husky/gpt_academic6.1CNA v3.00.6%2025-03-20Nuclei
CVE-2024-10762Missing authorization in lunary-ai/Lunary8.1CNA v3.00.5%2025-03-20Fix
CVE-2024-10727Cross-site scripting (XSS) in phpipam/phpipam6.1v3.10.3%2025-03-20Fix
CVE-2024-10725Stored cross-site scripting (XSS) in phpipam/phpipam5.4v3.10.3%2025-03-20Fix
CVE-2024-10724Stored XSS in IPV6 Section in phpipam/phpipam5.4v3.10.3%2025-03-20Fix
CVE-2024-10723Stored XSS in phpipam/phpipam5.4v3.10.3%2025-03-20Fix
CVE-2024-10722Stored cross-site scripting (XSS) in phpipam/phpipam5.4v3.10.3%2025-03-20Fix
CVE-2024-10721Store XSS in phpipam/phpipam5.4v3.10.3%2025-03-20Fix
CVE-2024-10720Stored cross-site scripting (XSS) in phpipam/phpipam6.1NVD v3.10.4%2025-03-20Fix
CVE-2024-10719Stored cross-site scripting (XSS) in phpipam/phpipam5.4v3.10.3%2025-03-20Fix
CVE-2024-10718Cookie without Secure attribute in phpipam/phpipam7.5v3.10.3%2025-03-20Fix
CVE-2024-10714Denial of service in binary-husky/gpt_academic7.5CNA v3.00.6%2025-03-20
CVE-2024-10713Denial of service (DoS) via Multipart request in szad670401/hyperlpr7.5CNA v3.00.5%2025-03-20
CVE-2024-10707Local file inclusion in gaizhenbiao/ChuanhuChatGPT6.5CNA v3.00.7%2025-03-20
CVE-2024-10650Denial of service (DoS) in gaizhenbiao/ChuanhuChatGPT7.5CNA v3.00.7%2025-03-20
CVE-2024-10648Path traversal in gradio-app/Gradio8.2CNA v3.00.7%2025-03-20
CVE-2024-10624Regular expression denial of service (ReDoS) in gradio-app/Gradio7.5CNA v3.01.1%2025-03-20
CVE-2024-10572Denial of service and arbitrary file write in h2oai/h2o-37.5CNA v3.00.7%2025-03-20
CVE-2024-10569Zip bomb vulnerability in gradio-app/Gradio7.5CNA v3.00.6%2025-03-20
CVE-2024-10553Jdbc deserialization in h2oai/h2o-39.8CNA v3.01.6%2025-03-20Fix
CVE-2024-10550Denial of service by ReDOS in h2oai/h2o-37.5CNA v3.00.6%2025-03-20
CVE-2024-10549Denial of service by ReDOS in h2oai/h2o-37.5CNA v3.00.6%2025-03-20
CVE-2024-10513Path traversal in mintplex-labs/anything-llm7.2CNA v3.00.9%2025-03-20Fix
CVE-2024-10481Cross-site request forgery (CSRF) in comfyanonymous/ComfyUI6.5CNA v3.00.2%2025-03-20
CVE-2024-10457SSRF vulnerabilities in Significant-Gravitas/autogpt6.5CNA v3.00.6%2025-03-20Fix
CVE-2024-10366IDOR in delete attachments in danny-avila/LibreChat6.5NVD v3.10.4%2025-03-20Fix
CVE-2024-10363Improper access control in danny-avila/LibreChat5.4CNA v3.00.4%2025-03-20Fix
CVE-2024-10361Arbitrary file deletion via path traversal in danny-avila/LibreChat9.1v3.11.0%2025-03-20Fix
CVE-2024-10359Mass assignment in Preset Creation allows User ID Manipulation in danny-avila/LibreChat4.6CNA v3.00.4%2025-03-20Fix
CVE-2024-10330Improper access control in lunary-ai/Lunary6.5CNA v3.00.5%2025-03-20Fix
CVE-2024-10275Improper Role Modification by Admins for Billing Permissions in lunary-ai/Lunary7.3CNA v3.00.5%2025-03-20Fix
CVE-2024-10274Improper authorization in lunary-ai/Lunary6.5CNA v3.00.5%2025-03-20Fix
CVE-2024-10273Improper privilege management in lunary-ai/Lunary6.5CNA v3.00.4%2025-03-20Fix
CVE-2024-10272Broken access control in lunary-ai/Lunary7.5CNA v3.00.6%2025-03-20Fix
CVE-2024-10267Information disclosure in TransformerOptimus/Superagi7.5CNA v3.00.6%2025-03-20
CVE-2024-10264HTTP request smuggling in netease-youdao/QAnything9.8v3.10.9%2025-03-20
CVE-2024-10252Code injection in langgenius/dify7.2v3.10.8%2025-03-20Fix
CVE-2024-10225Denial of service in haotian-liu/Llava7.5CNA v3.00.6%2025-03-20
CVE-2024-10190Unauthenticated remote code execution in ElasticRendezvousHandler in Horovod/Horovod9.8CNA v3.01.1%2025-03-20
CVE-2024-10188Denial of service in BerriAI/litellm7.5CNA v3.00.6%2025-03-20Fix
CVE-2024-10110Denial of service in aimhubio/aim7.5CNA v3.00.6%2025-03-20
CVE-2024-10109Incorrect authorization in mintplex-labs/anything-llm8.3CNA v3.00.5%2025-03-20Fix
CVE-2024-10051Unauthenticated denial of service in shaunwei/Realchar7.5CNA v3.00.6%2025-03-20
CVE-2024-10047Directory listing vulnerability in parisneo/lollms-webui5.3CNA v3.01.0%2025-03-20
CVE-2024-10019Path traversal and OS command injection in parisneo/lollms-webui6.7v3.10.8%2025-03-20
CVE-2024-9920Unrestricted file upload and Execution in parisneo/lollms-webui8.8v3.11.4%2025-03-20
CVE-2024-9919Missing authentication Check in parisneo/lollms-webui8.4CNA v3.00.3%2025-03-20
CVE-2024-9900Cross-site scripting (XSS) in mudler/LocalAI6.1v3.10.5%2025-03-20Fix
CVE-2024-9847Cross-site request forgery (CSRF) in flatpressblog/FlatPress8.0CNA v3.00.3%2025-03-20Fix
CVE-2024-9701Remote code execution in kedro-org/kedro9.8CNA v3.01.1%2025-03-20Fix
CVE-2024-9699Cross-site scripting (XSS) in flatpressblog/FlatPress5.4NVD v3.10.4%2025-03-20Fix
CVE-2024-9617IDOR in danswer-ai/danswer6.5CNA v3.01.7%2025-03-20Nuclei
CVE-2024-9612Unauthorized access in danswer-ai/danswer6.5v3.10.7%2025-03-20
CVE-2024-9606Improper output neutralization for logs in BerriAI/LiteLLM7.5v3.10.7%2025-03-20Fix
CVE-2024-9597Path traversal in parisneo/lollms7.1CNA v3.00.3%2025-03-20
CVE-2024-9447Exposure of sensitive information in TransformerOptimus/Superagi6.5CNA v3.00.6%2025-03-20
CVE-2024-9439Remote code execution in TransformerOptimus/Superagi8.8CNA v3.01.2%2025-03-20
CVE-2024-9437Unauthenticated denial of service in TransformerOptimus/Superagi7.5CNA v3.00.8%2025-03-20
CVE-2024-9431Improper privilege management in TransformerOptimus/Superagi8.8v3.10.6%2025-03-20
CVE-2024-9418Insufficiently protected credentials in TransformerOptimus/Superagi6.5v3.10.6%2025-03-20
CVE-2024-9415Path traversal in TransformerOptimus/Superagi8.8CNA v3.01.5%2025-03-20
CVE-2024-9365Cross-site request forgery (CSRF) in polyaxon/polyaxon6.5CNA v3.00.2%2025-03-20
CVE-2024-9363Unauthorized file deletion in polyaxon/polyaxon7.5CNA v3.01.0%2025-03-20