CVE-2024 list

CVE-2024 records published after 2024

Page three of six: records 2,001 to 3,000 of the 5,832 published after 2024, newest first. The first page carries the figures for After 2024.

CVE-2024 records published after 2024, newest first: records 2,001 to 3,000 of 5,832
CVE Summary CVSS EPSS Published Signals
CVE-2024-9362Directory traversal in polyaxon/polyaxon7.5CNA v3.04.3%2025-03-20Nuclei
CVE-2024-9340Denial of service (DoS) via Multipart Boundary in zenml-io/ZenML7.5CNA v3.01.0%2025-03-20Fix
CVE-2024-9311Cross-site request forgery to XSS in haotian-liu/llava6.1v3.10.2%2025-03-20
CVE-2024-9309SSRF in POST /worker_generate_stream API endpoint in haotian-liu/Llava9.3CNA v3.00.5%2025-03-20
CVE-2024-9308Open redirect in haotian-liu/Llava6.1CNA v3.00.5%2025-03-20
CVE-2024-9229Denial of service (DoS) via Multipart Boundary in stangirard/quivr7.5CNA v3.00.8%2025-03-20
CVE-2024-9216Authentication bypass in gaizhenbiao/ChuanhuChatGPT8.1CNA v3.00.6%2025-03-20
CVE-2024-9159Incorrect authorization in gaizhenbiao/ChuanhuChatGPT6.5CNA v3.00.6%2025-03-20
CVE-2024-9107Stored XSS in gaizhenbiao/ChuanhuChatGPT5.4v3.10.6%2025-03-20
CVE-2024-9099Exposure of Private API Keys in lunary-ai/Lunary8.1v3.10.6%2025-03-20Fix
CVE-2024-9098Privilege escalation in lunary-ai/Lunary6.1NVD v3.10.6%2025-03-20Fix
CVE-2024-9096Improper authorization in lunary-ai/Lunary7.1v3.10.5%2025-03-20Fix
CVE-2024-9095Improper authorization in lunary-ai/Lunary9.8v3.10.7%2025-03-20Fix
CVE-2024-9070Deserialization vulnerability in BentoML's Runner Server in bentoml/bentoml9.8CNA v3.00.9%2025-03-20
CVE-2024-9056Denial of service in bentoml/bentoml7.5CNA v3.00.7%2025-03-20
CVE-2024-9053Remote code execution in vllm-project/vLLM9.8v3.11.4%2025-03-20
CVE-2024-9000Improper authorization and Duplicate Slug vulnerability in lunary-ai/Lunary6.5NVD v3.10.5%2025-03-20Fix
CVE-2024-8999Improper access control in lunary-ai/Lunary7.5NVD v3.10.8%2025-03-20Fix
CVE-2024-8998Regular expression denial of service (ReDoS) in lunary-ai/Lunary7.5v3.10.8%2025-03-20Fix
CVE-2024-8984Denial of service (DoS) in BerriAI/LiteLLM7.5CNA v3.00.8%2025-03-20Fix
CVE-2024-8982Local file inclusion in bentoml/openllm6.2CNA v3.00.8%2025-03-20
CVE-2024-8966Denial of service in gradio-app/Gradio7.5v3.10.8%2025-03-20Fix
CVE-2024-8958Unrestricted File Write and Read in composiohq/Composio9.8v3.11.4%2025-03-20
CVE-2024-8955SSRF in composiohq/Composio7.5v3.10.7%2025-03-20
CVE-2024-8954Authentication bypass in composiohq/Composio9.8CNA v3.00.9%2025-03-20
CVE-2024-8953Unsafe eval usage in composiohq/Composio9.8v3.11.2%2025-03-20Fix
CVE-2024-8952SSRF in composiohq/Composio7.5v3.10.7%2025-03-20
CVE-2024-8898Path traversal in parisneo/lollms-webui9.8v3.10.8%2025-03-20Fix
CVE-2024-8859Path traversal in MLflow/MLflow7.5CNA v3.02.7%2025-03-20NucleiFix
CVE-2024-8789Regular expression denial of service (ReDoS) in lunary-ai/Lunary7.5CNA v3.00.8%2025-03-20Fix
CVE-2024-8769Arbitrary file deletion via relative path traversal in aimhubio/aim9.1v3.10.9%2025-03-20
CVE-2024-8765Improper Path Equivalence Resolution in lunary-ai/Lunary7.3CNA v3.00.8%2025-03-20Fix
CVE-2024-8764Improper authorization in lunary-ai/Lunary7.5CNA v3.00.8%2025-03-20Fix
CVE-2024-8763Regular expression denial of service (ReDoS) in lunary-ai/Lunary7.5CNA v3.00.8%2025-03-20Fix
CVE-2024-8736Denial of service (DoS) via Multipart Boundary in parisneo/lollms-webui6.5NVD v3.10.2%2025-03-20
CVE-2024-8616Arbitrary file overwrite in h2oai/h2o-38.2CNA v3.00.5%2025-03-20
CVE-2024-8613Improper access control in gaizhenbiao/ChuanhuChatGPT8.8v3.10.6%2025-03-20Fix
CVE-2024-8581Path traversal in parisneo/lollms-webui9.1CNA v3.01.0%2025-03-20Fix
CVE-2024-8556Stored XSS in modelscope/agentscope6.1v3.10.4%2025-03-20
CVE-2024-8551Path traversal in modelscope/agentscope9.1v3.11.0%2025-03-20
CVE-2024-8537Path traversal in modelscope/agentscope9.1CNA v3.01.0%2025-03-20
CVE-2024-8524Directory traversal in modelscope/agentscope7.5v3.11.1%2025-03-20
CVE-2024-8502Remote code execution via deserialization in modelscope/agentscope9.8CNA v3.01.8%2025-03-20
CVE-2024-8501Arbitrary file download in modelscope/agentscope8.8v3.11.0%2025-03-20
CVE-2024-8489CSRF due to overly permissive CORS headers in modelscope/agentscope8.8CNA v3.00.2%2025-03-20
CVE-2024-8487AgentScope Cross-Origin Resource Sharing (CORS) vulnerability9.8v3.10.3%2025-03-20
CVE-2024-8438Path traversal in modelscope/agentscope7.5CNA v3.00.8%2025-03-20
CVE-2024-8400Stored XSS in gaizhenbiao/ChuanhuChatGPT5.4v3.10.4%2025-03-20Fix
CVE-2024-8251Prisma injection in mintplex-labs/anything-llm5.3CNA v3.00.5%2025-03-20Fix
CVE-2024-8249Unauthenticated denial of service (DoS) in mintplex-labs/anything-llm7.5CNA v3.00.7%2025-03-20Fix
CVE-2024-8248Path traversal in mintplex-labs/anything-llm7.2CNA v3.00.9%2025-03-20Fix
CVE-2024-8238Unrestricted code execution in aimhubio/aim8.1v3.10.8%2025-03-20
CVE-2024-8196Missing authentication for critical function in mintplex-labs/anything-llm9.8CNA v3.00.8%2025-03-20Fix
CVE-2024-8183Prefect CORS (Cross-Origin Resource Sharing) misconfiguration7.6CNA v3.00.2%2025-03-20Fix
CVE-2024-8156Command injection in Significant-Gravitas/autogpt9.8v3.11.7%2025-03-20Fix
CVE-2024-8101Stored XSS in aimhubio/aim6.1NVD v3.10.4%2025-03-20
CVE-2024-8099Server-side request forgery (SSRF) in vanna-ai/vanna8.3CNA v3.00.4%2025-03-20
CVE-2024-8065CSRF in danswer-ai/danswer8.1CNA v3.00.2%2025-03-20
CVE-2024-8063Divide by zero in Ollama/Ollama7.5v3.10.6%2025-03-20
CVE-2024-8062Denial of service in h2oai/h2o-37.5v3.10.5%2025-03-20
CVE-2024-8061Denial of service in aimhubio/aim7.5CNA v3.00.5%2025-03-20
CVE-2024-8057Improper access control in danswer-ai/danswer4.3CNA v3.00.4%2025-03-20
CVE-2024-8055Local File Read (LFI) by prompt injection via SnowFlake SQL in vanna-ai/vanna7.5CNA v3.00.6%2025-03-20
CVE-2024-8053Improper authentication in open-webui/open-webui8.2v3.10.6%2025-03-20Fix
CVE-2024-8029Stored XSS in imartinez/PrivateGPT6.1v3.10.3%2025-03-20
CVE-2024-8028Denial of service in danswer-ai/danswer7.5CNA v3.00.5%2025-03-20
CVE-2024-8027Stored cross-site scripting (XSS) in netease-youdao/QAnything6.1CNA v3.00.3%2025-03-20
CVE-2024-8026CSRF due to overly permissive CORS headers in netease-youdao/Qanything8.1v3.10.2%2025-03-20
CVE-2024-8024Youdao QAnything origin validation error7.5CNA v3.00.3%2025-03-20
CVE-2024-8021Open redirect in gradio-app/Gradio6.1v3.10.7%2025-03-20Nuclei
CVE-2024-8020Denial of service in lightning-ai/pytorch-lightning7.5CNA v3.00.6%2025-03-20
CVE-2024-8019Arbitrary file write/Overwrite in lightning-ai/pytorch-lightning9.1v3.11.1%2025-03-20Fix
CVE-2024-8018Denial of service (DOS) in imartinez/PrivateGPT7.5CNA v3.00.6%2025-03-20
CVE-2024-8017Cross-site scripting (XSS) in open-webui/open-webui9.0CNA v3.00.6%2025-03-20
CVE-2024-7983Denial of service in open-webui/open-webui7.5CNA v3.00.9%2025-03-20Fix
CVE-2024-7957Arbitrary file overwrite in danswer-ai/danswer9.1CNA v3.00.9%2025-03-20
CVE-2024-7819danswer API origin validation origin validation error7.4CNA v3.00.3%2025-03-20
CVE-2024-7779ReDoS (regular expression denial of service) in danswer-ai/danswer7.5CNA v3.00.7%2025-03-20
CVE-2024-7776Arbitrary file overwrite in onnx/onnx9.1v3.11.5%2025-03-20Fix
CVE-2024-7771Denial of service in mintplex-labs/anything-llm6.5CNA v3.00.8%2025-03-20Fix
CVE-2024-7768Denial of service in h2oai/h2o-37.5CNA v3.00.8%2025-03-20
CVE-2024-7767Improper access control in danswer-ai/danswer8.1v3.10.6%2025-03-20
CVE-2024-7765Denial of service in h2oai/h2o-37.5v3.10.8%2025-03-20
CVE-2024-7764SQL injection in vanna-ai/vanna8.1CNA v3.00.8%2025-03-20
CVE-2024-7760CSRF in aimhubio/aim9.6v3.10.5%2025-03-20
CVE-2024-7598Kubernetes kube-apiserver network restriction bypass via race condition during namespace termination3.1CNA v3.10.3%2025-03-20Fix
CVE-2024-7476Broken access control in lunary-ai/Lunary4.3CNA v3.01.5%2025-03-20Fix
CVE-2024-7058Relative path traversal in parisneo/lollms-webui4.4CNA v3.00.3%2025-03-20
CVE-2024-7044Stored XSS in open-webui/open-webui8.9v3.10.5%2025-03-20Fix
CVE-2024-7043Improper access control in open-webui/open-webui8.8v3.10.6%2025-03-20Fix
CVE-2024-7035Cross-site request forgery (CSRF) in open-webui/open-webui6.9CNA v3.08.5%2025-03-20Fix
CVE-2024-6986Cross-site scripting (XSS) in parisneo/lollms-webui5.4v3.10.3%2025-03-20
CVE-2024-6982Remote code execution in Calculate function in parisneo/lollms8.4CNA v3.00.5%2025-03-20Fix
CVE-2024-6866Case-Insensitive Path Matching in corydolphin/Flask-cors7.5v3.10.7%2025-03-20Fix
CVE-2024-6863Encryption of arbitrary files with Attacker-Controlled Key in h2oai/h2o-36.5CNA v3.00.4%2025-03-20
CVE-2024-6854Arbitrary file overwrite in h2oai/h2o-37.1CNA v3.00.8%2025-03-20
CVE-2024-6851Arbitrary file deletion in aimhubio/aim7.5CNA v3.01.0%2025-03-20
CVE-2024-6844Inconsistent CORS Matching due to Handling of + in URL Path in corydolphin/Flask-cors5.3CNA v3.00.3%2025-03-20Fix
CVE-2024-6842Exposure of sensitive information in mintplex-labs/anything-llm7.5CNA v3.031.1%2025-03-20NucleiFix
CVE-2024-6841CSRF in vanna-ai/vanna6.5CNA v3.00.2%2025-03-20
CVE-2024-6839Improper Regex Path Matching in corydolphin/Flask-cors5.3v3.10.7%2025-03-20Fix
CVE-2024-6838Uncontrolled resource consumption in MLflow/MLflow5.3v3.10.6%2025-03-20Fix
CVE-2024-6829Arbitrary file overwrite through tarfile-extraction in aimhubio/aim9.1CNA v3.00.9%2025-03-20
CVE-2024-6827HTTP request smuggling in benoitc/gunicorn7.5CNA v3.00.8%2025-03-20Fix
CVE-2024-6825Remote code execution in BerriAI/LiteLLM8.8CNA v3.01.7%2025-03-20Fix
CVE-2024-6583Path traversal in stangirard/Quivr4.3CNA v3.00.6%2025-03-20
CVE-2024-6577Unclaimed S3 Bucket Usage in pytorch/serve6.3CNA v3.00.4%2025-03-20
CVE-2024-6483Arbitrary File/Directory Deletion in aimhubio/aim5.3CNA v3.00.9%2025-03-20
CVE-2024-5752Path traversal in stitionai/devika9.1CNA v3.01.6%2025-03-20
CVE-2024-4990Unsafe reflection in base component class in yiisoft/yii29.1v3.179.4%2025-03-20Fix
CVE-2024-4023Stored XSS in flatpressblog/FlatPress8.1CNA v3.00.8%2025-03-20Fix
CVE-2024-2292ChangeWeb UnifiedTransform missing authorization7.1CNA v3.00.5%2025-03-20
CVE-2024-0640Stored XSS in chatwoot/chatwoot4.8v3.10.3%2025-03-20Fix
CVE-2024-0245Inure AndroidManifest.xml incorrect default permissions5.5CNA v3.00.2%2025-03-20Fix
CVE-2024-57061Termius Electron Fuses configuration code injection9.8CISA ADP v3.10.7%2025-03-19
CVE-2024-55551Exasol JDBC driver modification of assumed-immutable data7.5CISA ADP v3.10.6%2025-03-19Fix
CVE-2024-55009Datax Autobib reflected cross-site scripting6.1v3.10.4%2025-03-19
CVE-2024-53970Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-03-19Fix
CVE-2024-53969Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-03-19Fix
CVE-2024-53968Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-03-19Fix
CVE-2024-53967Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-03-19Fix
CVE-2024-51459IBM InfoSphere server information command execution8.4CNA v3.10.1%2025-03-19Fix
CVE-2024-50631Synology Drive Server SQL command improper neutralization7.5CNA v3.126.2%2025-03-19Emerging ThreatsFix
CVE-2024-50630Synology Drive Server webapi component missing authentication7.5CNA v3.124.6%2025-03-19Emerging ThreatsKCVFix
CVE-2024-50629Synology BeeStation OS webapi component improper output encoding5.3CNA v3.131.7%2025-03-19Emerging ThreatsExploit codeKCVFix
CVE-2024-45644IBM Security ReaQta file upload4.7CNA v3.10.3%2025-03-19Fix
CVE-2024-42176HCL MyXalytics missing brute-force protection2.6CNA v3.10.2%2025-03-19Fix
CVE-2024-25132Openshift-dedicated: Hive: Hibernation controller denial of service4.3CNA v3.10.3%2025-03-19
CVE-2024-13933FoodBakery WordPress theme cross-site request forgery8.8CNA v3.10.2%2025-03-19
CVE-2024-13790MinimogWP The High Converting eCommerce WordPress theme unauthenticated local PHP file inclusion9.8CNA v3.10.8%2025-03-19Fix
CVE-2024-13442Service Finder Bookings WordPress plugin unauthenticated privilege escalation via account takeover9.8CNA v3.10.4%2025-03-19Fix
CVE-2024-13412CozyStay WordPress theme missing authorization to arbitrary action execution in ajax_handler7.5CNA v3.10.3%2025-03-19Fix
CVE-2024-13410CozyStay and TinySalt WordPress plugin PHP object injection9.8CNA v3.10.8%2025-03-19Fix
CVE-2024-12922Altair WordPress theme unauthenticated arbitrary options update via pp_import_current9.8CNA v3.10.5%2025-03-19Fix
CVE-2024-12920FoodBakery WordPress theme unauthorized access8.8CNA v3.10.4%2025-03-19Fix
CVE-2024-12295BoomBox Theme Extensions WordPress plugin privilege escalation8.8CNA v3.10.4%2025-03-19Fix
CVE-2024-12137Authentication bypass in Elfatek Elektronics' ANKA JPD-000287.6CNA v3.10.3%2025-03-19Fix
CVE-2024-12136Improper access control in Elfatek Elektronics' ANKA JPD-000287.8v3.10.2%2025-03-19Fix
CVE-2024-11131Synology Camera Firmware out-of-bounds read9.8CNA v3.10.8%2025-03-19Fix
CVE-2024-10445Synology BeeStation OS update functionality improper certificate validation4.3CNA v3.10.4%2025-03-19Fix
CVE-2024-10444Synology DiskStation Manager (DSM) LDAP utilities improper certificate validation7.5CNA v3.10.3%2025-03-19Fix
CVE-2024-10442Synology Replication Service transmission component off-by-one error10.0CNA v3.11.4%2025-03-19Fix
CVE-2024-10441Synology BeeStation OS system plugin daemon improper output encoding9.8CNA v3.11.2%2025-03-19Fix
CVE-2024-7631Openshift-console: Openshift console: Path traversal4.3CNA v3.10.5%2025-03-19
CVE-2024-57170SOPlanning path traversal6.5CISA ADP v3.10.8%2025-03-18
CVE-2024-57169SOPlanning file upload9.8CISA ADP v3.11.0%2025-03-18
CVE-2024-57151Rockoa Xinhu rainrocka SQL injection6.8CISA ADP v3.10.5%2025-03-18
CVE-2024-56347IBM AIX command execution9.6CNA v3.10.9%2025-03-18Fix
CVE-2024-56346IBM AIX command execution10.0CNA v3.11.1%2025-03-18Fix
CVE-2024-49822IBM QRadar Advisor server-side request forgery4.1CNA v3.10.3%2025-03-18Fix
CVE-2024-44314TastyIgniter has an incorrect access control vulnerability6.5CISA ADP v3.10.3%2025-03-18Fix
CVE-2024-44313TastyIgniter has an incorrect access control vulnerability via `invoice` function8.1CISA ADP v3.10.7%2025-03-18Exploit codeFix
CVE-2024-41975CODESYS (Edge) Gateway for Windows insecure default5.3CNA v3.10.4%2025-03-18Fix
CVE-2024-23943MB connect line: Cloud API access due to a lack of authentication for a critical function9.1CNA v3.10.6%2025-03-18Fix
CVE-2024-23942MB connect line: Configuration file on the client workstation is not encrypted7.1CNA v3.10.1%2025-03-18Fix
CVE-2024-21760Fortinet FortiSOAR code injection7.7CNA v3.10.8%2025-03-18Fix
CVE-2024-12563s2Member Pro WordPress plugin local file inclusion to remote code execution8.8CNA v3.10.6%2025-03-18Fix
CVE-2024-8997SQLi in Vestel's EVC04 Configuration Interface9.8CNA v3.10.4%2025-03-18Fix
CVE-2024-54565Apple macOS information disclosure6.2CISA ADP v3.10.2%2025-03-17Fix
CVE-2024-54559Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-03-17Fix
CVE-2024-54525Apple macOS unrestricted file upload8.8CISA ADP v3.10.6%2025-03-17Fix
CVE-2024-54027Fortinet FortiSandbox hard-coded cryptographic key7.8CNA v3.10.2%2025-03-17Fix
CVE-2024-49561Dell SmartFabric OS10 Software incorrect privilege assignment7.8CNA v3.10.2%2025-03-17Fix
CVE-2024-49559Dell SmartFabric OS10 Software default password8.8CNA v3.10.5%2025-03-17Fix
CVE-2024-48831Dell SmartFabric OS10 Software hard-coded password8.4CNA v3.10.2%2025-03-17Fix
CVE-2024-48830Dell SmartFabric OS10 Software command injection7.8CNA v3.10.7%2025-03-17Fix
CVE-2024-48828Dell SmartFabric OS10 Software improper privilege management5.5CNA v3.10.2%2025-03-17Fix
CVE-2024-48017Dell SmartFabric OS10 Software command injection6.5CNA v3.11.3%2025-03-17Fix
CVE-2024-48015Dell SmartFabric OS10 Software command injection6.7CNA v3.10.6%2025-03-17Fix
CVE-2024-48013Dell SmartFabric OS10 Software execution with unnecessary privileges8.8CNA v3.10.7%2025-03-17Fix
CVE-2024-44866A buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to to execute arbitrary code or cause a Denial of Service (DoS) via opening a crafted GuitarPro file.6.8CISA ADP v3.10.3%2025-03-17Fix
CVE-2024-44276Apple iOS and iPadOS cleartext transmission of sensitive information7.3CISA ADP v3.10.3%2025-03-17Fix
CVE-2024-40635containerd has an integer overflow in User ID handling4.6CNA v3.10.3%2025-03-17Exploit codeFix
CVE-2024-12992Pandora FMS remote code execution leads to command injection8.6CNA v4.01.2%2025-03-17Emerging ThreatsFix
CVE-2024-12971Pandora FMS QuickShell authenticated command injection8.6CNA v4.061.5%2025-03-17MetasploitEmerging ThreatsExploit codeFix
CVE-2024-9055Silicon Labs Simplicity SDK DPA Countermeasures need reseeding4.2CNA v3.10.2%2025-03-17Fix
CVE-2024-8510N-central path traversal5.3CNA v3.10.4%2025-03-17Fix
CVE-2024-58103Wire has uncontrolled recursion on Nested Groups5.8CNA v3.10.4%2025-03-16Fix
CVE-2024-13602Poll Maker WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-03-16Fix
CVE-2024-13126Download Manager WordPress plugin unauthenticated data exposure4.6CISA ADP v3.10.5%2025-03-16NucleiFix
CVE-2024-13497Tripetto attachment uploads stored cross-site scripting6.1NVD v3.10.3%2025-03-15Fix
CVE-2024-12336WC Affiliate WordPress plugin unauthorized access6.5CNA v3.10.3%2025-03-15Fix
CVE-2024-55594Fortinet FortiWeb HTTP request parsing vulnerability5.5CNA v3.10.5%2025-03-14Fix
CVE-2024-55549libxml2 libxslt use-after-free7.8v3.10.4%2025-03-14Fix
CVE-2024-54449LogicalDOC Community remote code execution (RCE) via arbitrary file write in Document API8.8NVD v3.10.6%2025-03-14Fix
CVE-2024-54448LogicalDOC Community remote code execution (RCE) via Automation Scripting7.2NVD v3.10.6%2025-03-14Fix
CVE-2024-54447LogicalDOC Community blind SQLi in Saved Search7.1CNA v4.00.3%2025-03-14Fix
CVE-2024-54446LogicalDOC Community blind SQLi in Document History7.1CNA v4.00.3%2025-03-14
CVE-2024-54445LogicalDOC Community blind SQLi in Login8.7CNA v4.00.4%2025-03-14Fix
CVE-2024-47573Fortinet FortiNDR improper integrity check validation6.0CNA v3.10.2%2025-03-14Fix
CVE-2024-46662Fortinet FortiManager command injection8.3CNA v3.12.2%2025-03-14Fix
CVE-2024-45643IBM QRadar EDR information disclosure5.9CNA v3.10.2%2025-03-14Fix
CVE-2024-45638IBM QRadar EDR information disclosure4.1CNA v3.10.1%2025-03-14Fix
CVE-2024-40590Fortinet FortiPortal improper certificate validation4.4CNA v3.10.2%2025-03-14Fix
CVE-2024-40585Fortinet FortiAnalyzer sensitive information in log files5.9CNA v3.10.3%2025-03-14Fix
CVE-2024-29409nest allows a remote attacker to execute arbitrary code via the Content-Type header5.5CISA ADP v3.10.3%2025-03-14Fix
CVE-2024-26006Fortinet FortiProxy cross-site scripting6.9CNA v3.10.6%2025-03-14Fix
CVE-2024-13913InstaWP Connect WordPress plugin cross-site request forgery8.8CNA v3.12.7%2025-03-14Fix
CVE-2024-13824CiyaShop - Multipurpose WooCommerce WordPress theme unauthenticated PHP object injection9.8v3.10.7%2025-03-14Fix
CVE-2024-13773Civi - Job Board and Freelance Marketplace WordPress theme sensitive information exposure7.5v3.10.3%2025-03-14
CVE-2024-13772Civi - Job Board and Freelance Marketplace WordPress theme authentication bypass5.9v3.10.3%2025-03-14Fix
CVE-2024-13771Civi - Job Board and Freelance Marketplace WordPress theme authentication bypass via password update5.9NVD v3.10.4%2025-03-14
CVE-2024-13407Omnipress WordPress plugin authenticated (Contributor+) post disclosure6.5v3.10.3%2025-03-14Fix
CVE-2024-13376Industrial WordPress theme missing authorization authenticated arbitrary options update8.8CNA v3.10.4%2025-03-14Fix
CVE-2024-13321AnalyticsWP WordPress plugin unauthenticated SQL injection9.8v3.10.5%2025-03-14Fix
CVE-2024-12810JobCareer WordPress theme unauthorized access8.1v3.10.3%2025-03-14
CVE-2024-12245LogicalDOC Community blind SQL injection in Logout8.7CNA v4.00.4%2025-03-14
CVE-2024-12020LogicalDOC Enterprise reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-03-14
CVE-2024-12019LogicalDOC Community arbitrary file read via Document API7.1CNA v4.00.5%2025-03-14Fix
CVE-2024-11286WP JobHunt WordPress plugin authentication bypass9.8CNA v3.10.6%2025-03-14
CVE-2024-11285WP JobHunt WordPress plugin unauthenticated privilege escalation via email Update/account takeover9.8CNA v3.10.4%2025-03-14
CVE-2024-11284WP JobHunt WordPress plugin unauthenticated privilege escalation via password Reset/account takeover9.8CNA v3.10.5%2025-03-14
CVE-2024-11283WP JobHunt WordPress plugin authentication bypass to Candidate7.5CNA v3.10.4%2025-03-14
CVE-2024-8176Red Hat Enterprise Linux 10 stack-based buffer overflow7.5CNA v3.11.4%2025-03-14Fix
CVE-2024-57348Pecanproject Pecan cross-site scripting6.1CISA ADP v3.10.3%2025-03-13
CVE-2024-57062Soundcloud improper privilege management6.7CISA ADP v3.10.1%2025-03-13
CVE-2024-55198Celk Saude response discrepancy5.3CISA ADP v3.10.4%2025-03-13
CVE-2024-55060Rafed-system Rafed Cms Website component index.php cross-site scripting6.1CISA ADP v3.10.5%2025-03-13Exploit code
CVE-2024-53406espressif esp-idf insecure direct object reference8.8CISA ADP v3.10.6%2025-03-13
CVE-2024-30143A path traversal vulnerability in HCL AppScan Traffic Recorder4.3CNA v3.10.4%2025-03-13
CVE-2024-28803Italtel I-mcs Nfv cross-site scripting6.1CISA ADP v3.10.3%2025-03-13
CVE-2024-22880Zadarma cross-site scripting4.7CISA ADP v3.10.3%2025-03-13
CVE-2024-13891Schedule WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-13
CVE-2024-13887Business Directory Plugin WordPress plugin insecure direct object reference5.3CNA v3.10.3%2025-03-13Fix
CVE-2024-13885WP E Customers WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-13
CVE-2024-13884Rivercitygraphix Limit Bio reflected cross-site scripting7.1CISA ADP v3.10.3%2025-03-13
CVE-2024-13703CRM and Lead Management by vcita WordPress plugin missing authorization authenticated widget Toggle4.3CNA v3.10.3%2025-03-13Fix
CVE-2024-13054Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.6%2025-03-13Fix
CVE-2024-12380Generation of error message containing sensitive information in GitLab4.4CNA v3.10.6%2025-03-13Fix
CVE-2024-10942All in One WP Migration WordPress plugin unauthenticated PHP object injection7.5CNA v3.10.6%2025-03-13Fix
CVE-2024-9042Kubernetes allows command injection affecting Windows nodes via nodes/*/logs/query API5.9CNA v3.11.4%2025-03-13Emerging ThreatsFix
CVE-2024-8402Improper neutralization of special elements used in a command (command injection) in GitLab3.7CNA v3.10.2%2025-03-13Fix
CVE-2024-7296Incorrect authorization in GitLab2.7CNA v3.10.4%2025-03-13Fix
CVE-2024-58089Linux kernel Btrfs delalloc accounting resource exhaustion7.8CNA v3.10.2%2025-03-12Fix
CVE-2024-58088Linux kernel BPF cgroup storage deadlock5.5v3.10.2%2025-03-12Fix
CVE-2024-58087Linux kernel ksmbd session lookup race condition9.8CNA v3.10.5%2025-03-12Fix
CVE-2024-52362IBM App Connect Enterprise Certified Container denial of service4.3CNA v3.10.5%2025-03-12Fix
CVE-2024-34398BMC Remedy Mid-tier cross-site scripting4.2CISA ADP v3.10.3%2025-03-12
CVE-2024-27763XPixelGroup BasicSR command injection5.3CISA ADP v3.10.2%2025-03-12
CVE-2024-26290Authenticated remote command injection affecting Avid NEXIS8.7CNA v4.00.5%2025-03-12Fix
CVE-2024-13872Bitdefender Box Insecure Update Mechanism vulnerability in libboxhermes.so9.4CNA v4.00.2%2025-03-12Fix
CVE-2024-13871Unauthenticated command injection in Bitdefender Box v19.4CNA v4.00.8%2025-03-12Fix
CVE-2024-13870Bitdefender BOX v1 An improper access control1.8CNA v4.00.2%2025-03-12Fix
CVE-2024-13838Uncanny Automator WordPress plugin server-side request forgery3.8NVD v3.10.3%2025-03-12Fix
CVE-2024-13498NEX-Forms WordPress plugin information disclosure5.3CNA v3.10.4%2025-03-12Fix
CVE-2024-13446Workreap WordPress plugin unauthenticated privilege escalation via account takeover9.8CNA v3.10.4%2025-03-12Fix
CVE-2024-13430Page Builder: Pagelayer WordPress plugin information disclosure4.3CNA v3.10.3%2025-03-12Fix
CVE-2024-12589Finale Lite WordPress plugin DOM-based cross-site scripting5.4v3.10.3%2025-03-12Fix
CVE-2024-10838Eclipse Cyclone DDS integer underflow in DDS_Security_Deserialize_ methods may lead to OOB read8.8CNA v4.00.9%2025-03-12Fix
CVE-2024-58102Datalust Seq uncontrolled recursion6.5v3.10.3%2025-03-11Fix
CVE-2024-56338IBM Sterling B2B Integrator cross-site scripting4.8CNA v3.10.3%2025-03-11Fix
CVE-2024-56336Siemens SINAMICS S200 improper authentication9.5CNA v4.00.6%2025-03-11Fix
CVE-2024-56182Siemens SIMATIC Field PG M5 protection mechanism failure8.4CNA v4.00.2%2025-03-11Fix
CVE-2024-56181Siemens SIMATIC Field PG M5 protection mechanism failure8.4CNA v4.00.2%2025-03-11Fix
CVE-2024-55597Fortinet FortiWeb path traversal5.2CNA v3.10.6%2025-03-11Fix
CVE-2024-55592Fortinet FortiSIEM incorrect authorization3.6CNA v3.10.3%2025-03-11Fix
CVE-2024-55590Fortinet FortiIsolator OS command injection8.6CNA v3.11.0%2025-03-11Fix
CVE-2024-54085AMI MegaRAC SPx authentication bypass by spoofing10.0CNA v4.060.7%2025-03-11KEVEmerging ThreatsExploit codeFix
CVE-2024-54084AMI AptioV SMM arbitrary Write via TOCTOU7.5CNA v3.10.1%2025-03-11Fix
CVE-2024-54026Fortinet FortiSandbox SQL injection4.1CNA v3.10.4%2025-03-11Fix
CVE-2024-54018Fortinet FortiSandbox OS command injection6.5CNA v3.110.0%2025-03-11Fix
CVE-2024-52961Fortinet FortiSandbox OS command injection8.6CNA v3.10.5%2025-03-11Fix
CVE-2024-52960Fortinet FortiSandbox client-side enforcement of server-side security4.2CNA v3.10.3%2025-03-11Fix
CVE-2024-52285Siemens SiPass integrated AC5102 (ACC-G2) missing authentication6.9CNA v4.00.5%2025-03-11Fix
CVE-2024-51322Zucchetti AD Hoc Infinity cross-site scripting5.4CISA ADP v3.10.4%2025-03-11
CVE-2024-51321Zucchetti AD Hoc Infinity open redirect7.6CISA ADP v3.10.3%2025-03-11
CVE-2024-51320Zucchetti AD Hoc Infinity cross-site scripting5.4CISA ADP v3.10.4%2025-03-11
CVE-2024-51319Zucchetti AD Hoc Infinity remote file inclusion7.3CISA ADP v3.10.5%2025-03-11
CVE-2024-49823IBM Common Cryptographic Architecture denial of service6.5CNA v3.10.4%2025-03-11Fix
CVE-2024-46663Fortinet FortiMail stack-based buffer overflow6.5CNA v3.10.2%2025-03-11Fix
CVE-2024-45328Fortinet FortiSandbox incorrect authorization7.1CNA v3.10.1%2025-03-11Fix
CVE-2024-45324Fortinet FortiPAM format string7.0CNA v3.10.7%2025-03-11Fix
CVE-2024-41760IBM Common Cryptographic Architecture information disclosure3.7CNA v3.10.3%2025-03-11Fix
CVE-2024-33501Fortinet FortiManager SQL injection4.0CNA v3.10.2%2025-03-11Fix
CVE-2024-32123Fortinet FortiManager OS command injection6.5CNA v3.10.4%2025-03-11Fix
CVE-2024-28607librasean IP-Utils server-side request forgery2.9CNA v3.10.1%2025-03-11
CVE-2024-22340IBM Common Cryptographic Architecture information disclosure6.5CNA v3.10.4%2025-03-11Fix
CVE-2024-13864Countdown Timer WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-11
CVE-2024-13862S3Bubble Media Streaming WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-11
CVE-2024-13853SEO Tools WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-03-11Nuclei
CVE-2024-13836WP Login Control WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-11
CVE-2024-13615Social Media Plugin by Social Snap WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-03-11Fix
CVE-2024-13580XV Random Quotes WordPress plugin settings reset via CSRF4.3CISA ADP v3.10.2%2025-03-11
CVE-2024-13574XV Random Quotes WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-11
CVE-2024-13436Appsero Helper WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-03-11Fix
CVE-2024-13413ProductDyno WordPress plugin reflected cross-site scripting via res parameter6.1CNA v3.10.3%2025-03-11Fix
CVE-2024-13228Qubely Advanced Gutenberg Blocks WordPress plugin sensitive information exposure6.5v3.10.4%2025-03-11Fix
CVE-2024-12010Zyxel AX7501-B1 firmware ”zyUtilMailSend” function of the Zyxel command injection7.2CNA v3.11.1%2025-03-11Fix
CVE-2024-12009Zyxel EX5601-T1 firmware "ZyEE" function of the Zyxel command injection7.2CNA v3.11.1%2025-03-11Fix
CVE-2024-11253Zyxel VMG8825-T50K firmware command injection7.2CNA v3.11.1%2025-03-11Fix
CVE-2024-9157Synaptics Audio Driver privilege escalation vulnerability in CxUIUSvc service7.8CNA v3.10.3%2025-03-11Fix
CVE-2024-57492Redox-os Redox integer overflow5.5v3.10.2%2025-03-10
CVE-2024-56192Google Android wl_cfgscan.c out-of-bounds write7.8CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-56191Google Android dhd_pno.c elevation of privilege8.4CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-56188Google Android null pointer dereference5.1CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-56187Google Android ppcfw.c information disclosure6.6CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-56186Google Android secureelementimpl.cpp out-of-bounds read5.1CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-56185Google Android protocolcalladapter.cpp out-of-bounds read5.1CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-56184Google Android tipc_dev_ql out-of-bounds read5.1CISA ADP v3.10.1%2025-03-10Fix
CVE-2024-55199Celk Saude Celk Sistemas stored cross-site scripting5.4CISA ADP v3.10.3%2025-03-10
CVE-2024-54560Apple macOS improper privilege management5.5v3.10.2%2025-03-10Fix
CVE-2024-54558Apple macOS UI misrepresentation2.8CISA ADP v3.10.2%2025-03-10Fix
CVE-2024-54546Apple macOS denial of service7.5v3.10.4%2025-03-10Fix
CVE-2024-54473Apple macOS information disclosure5.5v3.10.2%2025-03-10Fix
CVE-2024-54469Apple macOS information disclosure5.5v3.10.2%2025-03-10Fix
CVE-2024-54467Apple Safari information disclosure6.5v3.10.6%2025-03-10Fix
CVE-2024-54463Apple macOS information disclosure5.5v3.10.2%2025-03-10Fix
CVE-2024-53307Evisions Maps /mw/ endpoint reflected cross-site scripting5.4CISA ADP v3.10.3%2025-03-10Fix
CVE-2024-52905IBM Sterling B2B Integrator information disclosure2.7CNA v3.10.3%2025-03-10Fix
CVE-2024-52812LF Edge eKuiper has stored XSS in Rules Functionality5.4CNA v3.10.3%2025-03-10Fix
CVE-2024-47109IBM Sterling File Gateway information disclosure5.3CNA v3.10.3%2025-03-10Fix
CVE-2024-44227Apple macOS denial of service7.5v3.10.4%2025-03-10Fix
CVE-2024-44192Apple Safari and iOS web content processing resource exhaustion5.5v3.10.4%2025-03-10Fix
CVE-2024-44179Apple macOS information disclosure2.4CISA ADP v3.10.3%2025-03-10Fix
CVE-2024-43107Gallagher Milestone Integration Plugin improper certificate validation7.2CNA v3.10.2%2025-03-10Fix
CVE-2024-41724Gallagher Command Centre Server improper certificate validation8.7CNA v3.10.2%2025-03-10Fix
CVE-2024-13919Laravel reflected XSS via route parameter in Debug-Mode Error page6.1NVD v3.10.5%2025-03-10Fix
CVE-2024-13918Laravel reflected XSS via request parameter in Debug-Mode Error page6.1NVD v3.10.6%2025-03-10Fix
CVE-2024-12604Improper authentication in Tapandsign Technologies Tap and Sign App6.5v3.10.2%2025-03-10Fix
CVE-2024-11638Gtbabel WordPress plugin unauthenticated admin account takeover8.8CISA ADP v3.10.6%2025-03-10Fix
CVE-2024-13924Starter Templates by FancyWP WordPress plugin unauthenticated blind server-side request forgery9.1v3.10.4%2025-03-08
CVE-2024-13908SMTP by BestWebSoft WordPress plugin authenticated (Administrator+) arbitrary file upload7.2CNA v3.10.8%2025-03-08Fix
CVE-2024-13895Code Snippets CPT WordPress plugin authenticated (Subscriber+) arbitrary shortcode execution6.3v3.10.3%2025-03-08
CVE-2024-13890Allow PHP Execute WordPress plugin authenticated (Editor+) PHP code injection7.2CNA v3.10.5%2025-03-08
CVE-2024-13882CodeRevolution Aiomatic aiomatic_generate_featured_image function unrestricted file upload8.8CNA v3.10.8%2025-03-08Fix
CVE-2024-13844Post SMTP WordPress plugin authenticated (Administrator+) SQL injection via columns parameter4.9v3.10.4%2025-03-08Fix
CVE-2024-13835Post Meta Data Manager WordPress plugin Authentciated (Admin+) Multisite privilege escalation7.2v3.10.4%2025-03-08
CVE-2024-13826Email Keep WordPress plugin email deletion via CSRF5.4CISA ADP v3.10.2%2025-03-08
CVE-2024-13825Email Keep WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-03-08
CVE-2024-13816Aiomatic WordPress plugin unauthorized access5.4CNA v3.10.2%2025-03-08Fix
CVE-2024-13774Wishlist for WooCommerce: Multi Wishlists Per Customer WordPress plugin cross-site request forgery6.5v3.10.2%2025-03-08Fix
CVE-2024-13675SlingBlocks Gutenberg Blocks by FunnelKit WordPress plugin stored cross-site scripting5.4v3.10.2%2025-03-08Fix
CVE-2024-13649140+ Widgets WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-08Fix
CVE-2024-13640Print Invoice and Delivery Notes for WooCommerce WordPress plugin information disclosure5.9CNA v3.10.5%2025-03-08Fix
CVE-2024-13359Product Input Fields for WooCommerce WordPress plugin unauthenticated limited file upload9.8v3.10.9%2025-03-08Fix
CVE-2024-12460Years Since Timeless WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-08
CVE-2024-12119FooGallery WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-08Fix
CVE-2024-12114FooGallery WordPress plugin insecure direct object reference4.3v3.10.3%2025-03-08Fix
CVE-2024-11640VikRentCar Car Rental Management System WordPress plugin cross-site request forgery8.8v3.10.3%2025-03-08Fix
CVE-2024-11087miniOrange Social Login and Register Pro Addon WordPress plugin authentication bypass9.8v3.10.5%2025-03-08Fix
CVE-2024-10326RomethemeKit For Elementor WordPress plugin missing authorization in save_options and reset_widgets4.3CNA v3.10.4%2025-03-08Fix
CVE-2024-10321All-in-One Addons for Elementor WidgetKit WordPress plugin sensitive information exposure4.3v3.10.3%2025-03-08
CVE-2024-53700QNAP QuRouter command injection5.1CNA v4.01.2%2025-03-07Fix
CVE-2024-53699QNAP QTS and QuTS hero out-of-bounds write2.1CNA v4.00.5%2025-03-07Fix
CVE-2024-53698QNAP QTS and QuTS hero double free2.1CNA v4.00.4%2025-03-07Fix
CVE-2024-53697QNAP QTS and QuTS hero out-of-bounds write2.1CNA v4.00.5%2025-03-07Fix
CVE-2024-53696QNAP QuLog Center server-side request forgery5.1CNA v4.00.4%2025-03-07Fix
CVE-2024-53695QNAP HBS 3 Hybrid Backup Sync buffer overflow6.3CNA v4.00.5%2025-03-07Fix
CVE-2024-53694QNAP QVPN Device Client, Qsync and Qfinder Pro race condition8.6CNA v4.00.1%2025-03-07Fix
CVE-2024-53693QNAP QTS and QuTS hero CRLF injection7.1CNA v4.00.5%2025-03-07Fix
CVE-2024-53692QNAP QTS and QuTS hero command injection5.1CNA v4.00.8%2025-03-07Fix
CVE-2024-50405QNAP QTS and QuTS hero CRLF injection5.1CNA v4.00.4%2025-03-07Fix
CVE-2024-50394QNAP Helpdesk improper certificate validation7.7CNA v4.00.3%2025-03-07Fix
CVE-2024-50390QNAP QuRouter QHora firmware command injection7.7CNA v4.01.1%2025-03-07Fix
CVE-2024-48864QNAP Systems File Station 5 files accessible to external parties5.3CNA v4.00.5%2025-03-07Fix
CVE-2024-42733Docmosis tornado code injection9.8CISA ADP v3.11.1%2025-03-07
CVE-2024-38638QNAP QTS and QuTS hero out-of-bounds write2.1CNA v4.00.5%2025-03-07Fix
CVE-2024-13906Gallery by BestWebSoft WordPress plugin PHP object injection7.2CNA v3.10.7%2025-03-07Fix
CVE-2024-13904Platform.ly for WooCommerce WordPress plugin unauthenticated blind server-side request forgery9.1v3.10.4%2025-03-07Fix
CVE-2024-13857WPGet API WordPress plugin authenticated (Administrator+) server-side request forgery5.5CNA v3.10.3%2025-03-07Fix
CVE-2024-13805Advanced File Manager WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-07Fix
CVE-2024-13781Hero Maps Premium - Customizable Google Maps WordPress plugin SQL injection6.5v3.10.3%2025-03-07
CVE-2024-13668WordPress Activity O Meter plugin reflected XSS7.1CISA ADP v3.10.3%2025-03-07
CVE-2024-13655Flex Mag WordPress theme unauthorized access8.1CNA v3.10.3%2025-03-07Fix
CVE-2024-13635VK Blocks WordPress plugin missing authorization to sensitive information exposure4.3CNA v3.10.3%2025-03-07Fix
CVE-2024-13552SupportCandy WordPress plugin insecure direct object reference4.3CNA v3.10.3%2025-03-07Fix
CVE-2024-13526EventPrime WordPress plugin unauthorized access4.3CNA v3.10.3%2025-03-07Fix
CVE-2024-13431Appointment Booking Calendar WordPress plugin reflected cross-site scripting6.1v3.10.4%2025-03-07Fix
CVE-2024-13320CURCY WordPress plugin SQL injection7.5CNA v3.10.4%2025-03-07Fix
CVE-2024-13086QNAP QTS and QuTS hero information disclosure5.3CNA v3.10.4%2025-03-07Fix
CVE-2024-12975Silicon Labs CPC can leak information in full duplex SPI1.0CNA v4.00.2%2025-03-07Fix
CVE-2024-12876Golo - Directory and Listing, Travel WordPress theme missing authorization privilege escalation9.8CNA v3.10.5%2025-03-07Fix
CVE-2024-12837GPU DDK Exploitable kernel double free on apsFenceSyncCheckpoints allocated with arbitrary size7.8CISA ADP v3.10.2%2025-03-07Fix
CVE-2024-12809Wishlist WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-07Fix
CVE-2024-12634Related Posts WordPress plugin cross-site request forgery6.1CNA v3.10.2%2025-03-07Fix
CVE-2024-12611School Management System for Wordpress plugin reflected cross-site scripting5.3CNA v3.10.3%2025-03-07
CVE-2024-12610dasinfomedia School Management System fee type and category deletion actions missing authorization5.3CNA v3.10.3%2025-03-07
CVE-2024-12609School Management System for Wordpress plugin SQL injection6.5CNA v3.10.4%2025-03-07Fix
CVE-2024-12607School Management System for Wordpress plugin SQL injection6.5CNA v3.10.3%2025-03-07Fix
CVE-2024-12576GPU DDK Untrusted app can crash firmware by forcing MCU access to non-aligned address5.5CISA ADP v3.10.1%2025-03-07Fix
CVE-2024-12036CS Framework WordPress plugin authenticated (Subscriber+) arbitrary file read7.5CNA v3.10.4%2025-03-07
CVE-2024-12035CS Framework WordPress plugin authenticated (Subscriber+) arbitrary file deletion8.8CNA v3.10.9%2025-03-07Fix
CVE-2024-10804Ultimate Video Player WordPress plugin unauthenticated arbitrary file download7.5CNA v3.10.8%2025-03-07Fix
CVE-2024-9658School Management System for Wordpress plugin account takeover and privilege escalation8.8CNA v3.10.4%2025-03-07
CVE-2024-9458Reservit Hotel WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.9%2025-03-07Exploit codeFix
CVE-2024-58086Linux kernel V3D performance monitor vulnerability7.8CNA v3.10.2%2025-03-06Fix
CVE-2024-58085Linux kernel TOMOYO write control interface vulnerability5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58084Linux kernel scm null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58083Linux kernel KVM vCPU lookup use-after-free7.8CNA v3.10.2%2025-03-06Fix
CVE-2024-58082Linux kernel Nuvoton video ECE driver vulnerability5.5v3.10.2%2025-03-06Fix
CVE-2024-58081Linux kernel MMP2 power domain clock driver null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58080Linux kernel SM6350 display clock controller null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58079Linux kernel UVC video GPIO unit vulnerability7.8CNA v3.10.2%2025-03-06Fix
CVE-2024-58078Linux kernel misc device minor allocator vulnerability5.5v3.10.2%2025-03-06Fix
CVE-2024-58077Linux kernel ASoC PCM prepare callback denial of service5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58076Linux kernel SM6350 GCC clock driver null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58075Linux kernel Tegra crypto driver vulnerability7.8CNA v3.10.2%2025-03-06Fix
CVE-2024-58074Linux kernel i915 display encoder vulnerability5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58073Linux kernel MSM DPU plane state null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58072Linux kernel rtlwifi driver probe path use-after-free7.8NVD v3.10.2%2025-03-06Fix
CVE-2024-58071Linux kernel team improper locking5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58070Linux kernel BPF local storage allocator improper locking7.8CNA v3.10.1%2025-03-06Fix
CVE-2024-58069Linux kernel PCF85063 RTC NVMEM interface out-of-bounds write7.8CNA v3.10.2%2025-03-06Fix
CVE-2024-58068Linux kernel OPP bandwidth lookup null pointer dereference5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58067Linux kernel pxa1908 MPMU clock driver null pointer dereference5.5v3.10.1%2025-03-06Fix
CVE-2024-58066Linux kernel pxa1908 APBCP clock driver null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58065Linux kernel pxa1908 APBC clock driver null pointer dereference5.5v3.10.1%2025-03-06Fix
CVE-2024-58064Linux kernel cfg80211 test suite null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58063Linux kernel rtlwifi Wi-Fi driver memory leak5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58062Linux kernel iwlwifi Wi-Fi driver null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58061Linux kernel mac80211 link management denial of service5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58060Linux kernel BPF struct_ops registration use-after-free7.8CNA v3.10.2%2025-03-06Fix
CVE-2024-58059Linux kernel UVC video driver probe deadlock5.5v3.10.1%2025-03-06Fix
CVE-2024-58058Linux kernel UBIFS TNC tree dump null pointer dereference5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58057Linux kernel idpf driver workqueues vulnerability5.5v3.10.2%2025-03-06Fix
CVE-2024-58056Linux kernel remoteproc core vulnerability5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-58055Linux kernel USB gadget TCM function driver double free7.8v3.10.3%2025-03-06Fix
CVE-2024-58054In the Linux kernel, the following vulnerability has been resolved: staging: media: max96712: fix kernel oops when removing module The following kernel oops is thrown when trying to remove the max96712 module: Unable to handle kernel paging request at virtual address 00007375746174db Mem abort in7.1v3.10.2%2025-03-06Fix
CVE-2024-58053Linux kernel rxrpc connection abort handling denial of service7.5CNA v3.10.5%2025-03-06Fix
CVE-2024-58052Linux kernel amdgpu ATOM BIOS control null pointer dereference5.5v3.10.2%2025-03-06Fix
CVE-2024-58051Linux kernel IPMI IPMB driver null pointer dereference5.5NVD v3.10.2%2025-03-06Fix
CVE-2024-57972Microsoft HoloLens resource exhaustion6.5CNA v3.12.6%2025-03-06
CVE-2024-56202Apache Traffic Server: Expect header field can unreasonably retain resource4.3CISA ADP v3.10.9%2025-03-06Fix
CVE-2024-56196Apache Traffic Server: ACL is not fully compatible with older versions6.3CISA ADP v3.10.8%2025-03-06Fix
CVE-2024-56195Apache Traffic Server: Intercept plugins are not access controlled6.3CISA ADP v3.10.8%2025-03-06Fix
CVE-2024-52924Samsung Exynos 9820 stack-based buffer overflow7.5CISA ADP v3.10.4%2025-03-06Fix
CVE-2024-52923Samsung Exynos 9820 denial of service7.5CISA ADP v3.10.4%2025-03-06Fix
CVE-2024-51476IBM Concert Software information disclosure7.5CNA v3.10.4%2025-03-06Fix
CVE-2024-50600Samsung Exynos 980 out-of-bounds read7.5CISA ADP v3.10.4%2025-03-06Fix
CVE-2024-42844Epicor Prophet 21 SQL injection8.1CISA ADP v3.10.4%2025-03-06
CVE-2024-38311Apache Traffic Server: Request smuggling via pipelining after a chunked message body6.3CISA ADP v3.10.9%2025-03-06Fix
CVE-2024-13902huang-yk student-manage Edit a Student Information page cross-site scripting5.4v3.10.3%2025-03-06
CVE-2024-13897Moving Media Library WordPress plugin directory traversal to arbitrary file deletion6.5CNA v3.11.0%2025-03-06Fix
CVE-2024-13894Path traversal in Smartwares cameras5.9CNA v4.00.2%2025-03-06
CVE-2024-13893Shared credentials in Smartwares cameras7.5CNA v4.00.2%2025-03-06
CVE-2024-13892Command injection in Smartwares cameras7.7CNA v4.00.7%2025-03-06
CVE-2024-13868tahminajannat URL Shortener reflected cross-site scripting6.1CISA ADP v3.10.3%2025-03-06
CVE-2024-12742Deserialization of untrusted data vulnerability in NI G Web Development Software8.4CNA v4.05.5%2025-03-06
CVE-2024-12146SQLi in Finder Fire Safety's Finder ERP/CRM (New System)7.5CNA v3.10.4%2025-03-06Fix
CVE-2024-12144SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)9.8CNA v3.10.4%2025-03-06Fix
CVE-2024-7872Sensetive data exposure in ExtremePACS' Extreme XDS7.6CNA v3.10.3%2025-03-06Fix
CVE-2024-57174Alphion ASEE-1443 Firmware default DNS suffix information disclosure8.1CISA ADP v3.10.4%2025-03-05
CVE-2024-53458Sysax Multi Server denial of service7.5CISA ADP v3.10.5%2025-03-05
CVE-2024-51144'pvmsg.php?action=add_message' cross-site request forgery8.8CISA ADP v3.10.5%2025-03-05
CVE-2024-48246Janobe Vehicle Management System cross-site scripting5.4CISA ADP v3.10.4%2025-03-05Exploit code
CVE-2024-31525Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authorization mechanism is not validated on the server side and only on the client side. This can result, f7.2CISA ADP v3.10.4%2025-03-05
CVE-2024-13866Simple Notification WordPress plugin authenticated (Administrator+) stored cross-site scripting6.4CNA v3.10.2%2025-03-05
CVE-2024-13839Company Directory WordPress plugin reflected cross-site scripting via add_query_arg function6.1CNA v3.10.3%2025-03-05
CVE-2024-13827Razorpay Subscription Button Elementor WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-05Fix
CVE-2024-13815Themographics Listingo shortcode handler code injection6.5CNA v3.10.4%2025-03-05
CVE-2024-13811Lafka WordPress theme unauthorized access4.3CNA v3.10.2%2025-03-05
CVE-2024-13810Zass WordPress theme unauthorized access4.3CNA v3.10.2%2025-03-05
CVE-2024-13809Hero Slider - WordPress Slider plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.3%2025-03-05
CVE-2024-13787VEDA - MultiPurpose WordPress theme authenticated (Subscriber+) PHP object injection9.8CNA v3.10.7%2025-03-05
CVE-2024-13780Hero Mega Menu WordPress plugin arbitrary file deletion6.5CNA v3.10.3%2025-03-05
CVE-2024-13779Hero Mega Menu - Responsive WordPress Menu plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-05
CVE-2024-13778Hero Mega Menu - Responsive WordPress Menu plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2025-03-05
CVE-2024-13777ZoomSounds - WordPress Wave Audio Player with Playlist plugin unauthenticated PHP object injection9.8v3.10.6%2025-03-05
CVE-2024-13757Master Slider Responsive Touch Slider WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-05Fix
CVE-2024-13747WooMail - WooCommerce Email Customizer WordPress plugin missing authorization SQL injection4.3CNA v3.10.2%2025-03-05
CVE-2024-13471DesignThemes Core Features WordPress plugin unauthorized access7.5CNA v3.10.5%2025-03-05Fix
CVE-2024-13423silkalns Sparkling plugin activation functions missing authorization5.3CNA v3.10.4%2025-03-05Fix
CVE-2024-13350SearchIQ The Search Solution WordPress plugin stored cross-site scripting5.4v3.10.2%2025-03-05Fix
CVE-2024-13232ddeveloper Awesome Import and Export Plugin missing authorization8.8CNA v3.10.5%2025-03-05
CVE-2024-13147SQLi in Merkur Software's B2B Login Panel9.8CNA v3.10.4%2025-03-05Fix
CVE-2024-12815Point Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-03-05
CVE-2024-12799OpenText Identity Manager Advanced Edition insufficiently protected credentials10.0CNA v4.00.4%2025-03-05
CVE-2024-12650WAGO CC100 0751-9x01 unchecked return value5.4CNA v3.10.3%2025-03-05Fix
CVE-2024-12281Homey WordPress theme unauthenticated privilege escalation in homey_save_profile9.8CNA v3.10.4%2025-03-05Fix
CVE-2024-12097SQLi in Boceksoft Informatics' E-Travel9.8CNA v3.10.4%2025-03-05Fix
CVE-2024-11951Homey Login Register WordPress plugin unauthenticated privilege escalation in homey_register9.8CNA v3.10.4%2025-03-05
CVE-2024-11731Master Slider Responsive Touch Slider WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-05Fix
CVE-2024-11216Broken access control in PozitifIK's Pik Online7.6CNA v3.10.3%2025-03-05Fix
CVE-2024-11153Content Control WordPress plugin information disclosure5.3CNA v3.10.4%2025-03-05Fix
CVE-2024-11035Carbon Black Cloud Windows Sensor information leak2.5CNA v3.10.2%2025-03-05
CVE-2024-8682JNews - WordPress Newspaper Magazine Blog AMP theme unauthorized user Registration5.3CNA v3.10.3%2025-03-05Exploit codeFix
CVE-2024-5667WP Featherlight and Responsive Lightbox and Gallery stored cross-site scripting6.4CNA v3.10.3%2025-03-05Fix
CVE-2024-0141NVIDIA Hopper HGX 8-GPU exposed IOCTL without access control6.8CNA v3.10.5%2025-03-05Fix
CVE-2024-0114NVIDIA Hopper HGX 8-GPU code execution8.1CNA v3.10.2%2025-03-05Fix
CVE-2024-58050Huawei HarmonyOS vulnerability of improper access permission in the HDC module6.2CNA v3.10.1%2025-03-04Fix
CVE-2024-58049Huawei HarmonyOS permission verification vulnerability in the media library module5.0CNA v3.10.1%2025-03-04Fix
CVE-2024-58048Huawei HarmonyOS multi-thread problem vulnerability in the package management module6.7CNA v3.10.1%2025-03-04Fix
CVE-2024-58047Huawei HarmonyOS permission verification vulnerability in the media library module5.0CNA v3.10.1%2025-03-04Fix
CVE-2024-58046Huawei HarmonyOS permission management vulnerability in the lock screen module6.2CNA v3.10.1%2025-03-04Fix
CVE-2024-58045Huawei HarmonyOS multi-concurrency vulnerability in the media digital copyright protection module8.6CNA v3.10.1%2025-03-04Fix
CVE-2024-58044Huawei HarmonyOS permission verification bypass vulnerability in the notification module8.4CNA v3.10.1%2025-03-04Fix
CVE-2024-58043Huawei HarmonyOS permission bypass vulnerability in the window module7.3CNA v3.10.1%2025-03-04Fix
CVE-2024-50707Uniguest Tripleplay unauthenticated remote code execution10.0CISA ADP v3.10.8%2025-03-04Fix
CVE-2024-50706Uniguest Tripleplay SQL injection9.8CISA ADP v3.10.5%2025-03-04Fix
CVE-2024-50705Uniguest Tripleplay reflected cross-site scripting7.1CISA ADP v3.10.2%2025-03-04Fix
CVE-2024-50704Uniguest Tripleplay unauthenticated remote code execution10.0CISA ADP v3.10.9%2025-03-04Fix
CVE-2024-48248NAKIVO Backup and Replication absolute path traversal8.6v3.194.4%2025-03-04KEVNucleiEmerging ThreatsExploit codeFix
CVE-2024-47262Axis Communications AXIS OS improper type validation5.3CNA v3.10.4%2025-03-04Fix
CVE-2024-47260Axis Communications AXIS OS VAPIX mediaclip.cgi vulnerability6.5CNA v3.10.4%2025-03-04Fix
CVE-2024-47259Axis Communications AXIS OS unrestricted file upload3.5CNA v3.10.5%2025-03-04Fix
CVE-2024-41147Miniaudio ma_dr_flac__decode_samples__lpc functionality out-of-bounds write9.8v3.10.7%2025-03-04Fix
CVE-2024-13724Wallet System for WooCommerce WordPress plugin unauthorized access4.3v3.10.2%2025-03-04Fix
CVE-2024-13686VW Storefront WordPress theme missing authorization to authenticated (Subscriber+) settings reset4.3CNA v3.10.3%2025-03-04Fix
CVE-2024-13685Admin and Site Enhancements (ASE) WordPress plugin Limit login Attempt bypass via IP spoofing5.3CISA ADP v3.10.4%2025-03-04Fix
CVE-2024-13682Wallet System for WooCommerce WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-03-04Fix
CVE-2024-11957Arbitrary code execution in WPS Office9.3CNA v4.00.1%2025-03-04Fix
CVE-2024-10930Carrier Block Load privilege escalation7.1CNA v4.00.4%2025-03-04Fix
CVE-2024-9618Master Addons WordPress plugin stored cross-site scripting5.4v3.10.3%2025-03-04Fix
CVE-2024-9149SQLi in Wind Media's E-Commerce Website Template8.6CNA v3.10.3%2025-03-04Fix
CVE-2024-9135Arista Networks EOS BGP agent memory leak5.3CNA v3.10.4%2025-03-04
CVE-2024-8000Arista EOS 802.1X dynamic ACL installation improper quantity validation5.3CNA v3.10.2%2025-03-04
CVE-2024-57240Apryse WebViewer Rendering Engine component cross-site scripting5.4CISA ADP v3.10.3%2025-03-03
CVE-2024-55570Cubro EXA48200 user API incorrect privilege assignment5.4CISA ADP v3.10.3%2025-03-03
CVE-2024-55532Apache Ranger: Improper neutralization of formula elements in a CSV file9.8CISA ADP v3.10.8%2025-03-03Fix
CVE-2024-55064Easyvirt Dc Netscope cross-site scripting5.4v3.10.3%2025-03-03
CVE-2024-54179IBM Business Automation Workflow cross-site scripting5.4CNA v3.10.3%2025-03-03Fix
CVE-2024-53388Mavo cross-site scripting8.8CISA ADP v3.10.6%2025-03-03
CVE-2024-53387Umeditor cross-site scripting8.8CISA ADP v3.10.6%2025-03-03
CVE-2024-53386Stage.js DOM Clobbering vulnerabilty6.1v3.10.2%2025-03-03
CVE-2024-53384Egoist Tsup cross-site scripting5.1CISA ADP v3.10.2%2025-03-03
CVE-2024-53382PrismJS prism code injection5.4v3.10.3%2025-03-03Fix
CVE-2024-53034Qualcomm Snapdragon untrusted pointer dereference in DSP_Services7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53033Qualcomm Snapdragon untrusted pointer dereference in DSP_Services7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53032Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Automotive OS Platform7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53031Qualcomm Snapdragon improper input validation in Automotive OS Platform7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53030Qualcomm Snapdragon improper input validation in Automotive OS Platform7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53029Qualcomm Snapdragon improper input validation in Automotive OS Platform7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53028Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Automotive Vehicle Networks7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53027Qualcomm Snapdragon buffer copy without checking size of input in WLAN host7.5CNA v3.10.3%2025-03-03Exploit codeFix
CVE-2024-53025Qualcomm Snapdragon integer overflow or wraparound in BT controller5.5CNA v3.10.1%2025-03-03Fix
CVE-2024-53024Qualcomm Snapdragon null pointer dereference in Display7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53023Qualcomm Snapdragon use-after-free in Automotive Android OS7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53022Qualcomm Snapdragon improper input validation in Automotive OS Platform7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53014Qualcomm Snapdragon improper validation of array index in Audio7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53012Qualcomm Snapdragon improper input validation in Automotive OS Platform7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-53011Qualcomm Snapdragon Permissions, Privileges, and Access Controls in Video Analytics and Processing7.9CNA v3.10.1%2025-03-03Fix
CVE-2024-51966Directory traversal vulnerability in ArcGIS Server4.9CNA v3.10.6%2025-03-03Fix
CVE-2024-51963Stored XSS in ArcGIS Server Manager4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51962SQL injection vulnerability in ArcGIS Server8.7CNA v3.10.5%2025-03-03Fix
CVE-2024-51961Local file inclusion (LFI) vulnerability in ArcGIS Server7.5CNA v3.10.5%2025-03-03Fix
CVE-2024-51960Stored XSS in ArcGIS Server Administrator Directory4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51959Esri ArcGIS Server stored XSS issue in Server Admin API4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51958Esri ArcGIS Server directory traversal vulnerability in the admin API for service thumbnails4.9CNA v3.10.6%2025-03-03Fix
CVE-2024-51957Stored XSS vulnerability in ArcGIS Rest Services Directory4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51956Stored XSS vulnerability in ArcGIS Server Administrator Directory4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51954Unauthorized access to secure services in ArcGIS Server8.5CNA v3.10.3%2025-03-03Fix
CVE-2024-51953Stored XSS in ArcGIS Server Rest services4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51952Stored XSS issue in ArcGIS Server4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51951Esri ArcGIS Server stored XSS in Server Admin API4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51950Esri ArcGIS Server There is a stored cross-site scripting4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51949Esri ArcGIS Server There is a stored cross-site scripting4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51948Esri ArcGIS Server stored XSS vulnerability in Rest services under Job ID4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51947Esri ArcGIS Server stored XSS vulnerability in Rest services under Layer name4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51946Esri ArcGIS Server stored XSS in Rest Services Directory under Identify operation4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51945Esri ArcGIS Server stored XSS issues in Server Admin API4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51944Esri ArcGIS Server stored XSS in Rest Services Directory4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51942Esri ArcGIS Server stored XSS vulnerability in Rest Admin API under Hosted feature services page4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-51091Seajs cross-site scripting5.4CISA ADP v3.10.4%2025-03-03
CVE-2024-49836Qualcomm Snapdragon improper validation of array index in Camera7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-47092Heinlein-support Check Mk Python API deserialization of untrusted data7.7CNA v4.00.4%2025-03-03
CVE-2024-45782GRUB2: Fs/hfs: Strcpy using the volume name (fs/hfs.c:382)7.8NVD v3.10.2%2025-03-03Fix
CVE-2024-45780GRUB2: Fs/tar: Integer overflow causes heap OOB write6.7NVD v3.10.3%2025-03-03Fix
CVE-2024-45779GRUB2: Fs/bfs: Integer overflow leads to heap OOB read in the bfs parser6.0NVD v3.10.3%2025-03-03Fix
CVE-2024-45778GRUB2: Fs/bfs: Integer overflow in the bfs parser5.5NVD v3.10.3%2025-03-03Fix
CVE-2024-45580Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43169IBM Engineering Requirements Management DOORS Next file download8.8CNA v3.10.2%2025-03-03Fix
CVE-2024-43062Qualcomm Snapdragon use-after-free in Camera Linux7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43061Qualcomm Snapdragon use-after-free in Audio7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43060Qualcomm Snapdragon use of out-of-range pointer offset in Automotive Audio7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43059Qualcomm Snapdragon use-after-free in Automotive Multimedia7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43057Qualcomm Snapdragon use-after-free in MProc7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43056Qualcomm Snapdragon buffer over-read in Hypervisor5.5CNA v3.10.1%2025-03-03Fix
CVE-2024-43055Qualcomm Snapdragon buffer copy without checking size of input in Camera_Linux7.8CNA v3.10.1%2025-03-03Fix
CVE-2024-43051Qualcomm Snapdragon improper authorization in SPS-HLOS5.5CNA v3.10.1%2025-03-03Fix
CVE-2024-41771IBM Engineering Requirements Management DOORS Next information disclosure7.5CNA v3.10.5%2025-03-03Fix
CVE-2024-41770IBM Engineering Requirements Management DOORS Next information disclosure7.5CNA v3.10.5%2025-03-03Fix
CVE-2024-38426Qualcomm Snapdragon improper authentication in Modem5.4CNA v3.10.3%2025-03-03Fix
CVE-2024-30154HCL SX is susceptible to a cross-site request forgery (CSRF)5.3CNA v3.10.1%2025-03-03Fix
CVE-2024-24778Apache StreamPipes: Resources permission escalation6.5CISA ADP v3.10.7%2025-03-03Fix
CVE-2024-10925Authorization bypass through user-controlled key in GitLab5.3CNA v3.10.3%2025-03-03Fix
CVE-2024-10904Esri ArcGIS Server stored XSS in Server Admin API4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-8262Path traversal in Proliz Software's OBS9.8v3.10.6%2025-03-03Fix
CVE-2024-8261IDOR in Proliz Software's OBS9.8NVD v3.10.4%2025-03-03Fix
CVE-2024-8186Improper neutralization of input during web page generation (cross-site scripting) in GitLab5.4CNA v3.10.3%2025-03-03Fix
CVE-2024-5888Esri ArcGIS Server stored XSS in Rest Services API for a Toolbox published as GP service4.8CNA v3.10.3%2025-03-03Fix
CVE-2024-55907IBM Cognos Mobile information disclosure2.0CNA v3.10.3%2025-03-02Fix
CVE-2024-36353AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics incomplete cleanup6.5CNA v3.10.2%2025-03-02
CVE-2024-41778IBM Controller information disclosure5.3CNA v3.10.3%2025-03-01Fix
CVE-2024-13911sminozzi Database Backup and Table Integrity Check with Automated Scheduling information disclosure7.2CNA v3.10.6%2025-03-01Fix
CVE-2024-13910sminozzi Database Backup and Table Integrity Check with Automated Scheduling path traversal7.2CNA v3.11.0%2025-03-01Fix
CVE-2024-13901Wow-Company Counter Box content parameter stored cross-site scripting4.8v3.10.3%2025-03-01Fix
CVE-2024-13833Album Gallery WordPress Gallery plugin authenticated (Editor+) PHP object injection via Gallery Meta7.2CNA v3.10.6%2025-03-01Fix
CVE-2024-13806Authors List WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.4%2025-03-01Fix
CVE-2024-13750Multilevel Referral Affiliate Plugin for WooCommerce WordPress plugin SQL injection6.5CNA v3.10.4%2025-03-01Fix
CVE-2024-13746Booking Calendar and Notification WordPress plugin missing authorization6.5CNA v3.10.3%2025-03-01
CVE-2024-13697Better Messages WordPress plugin server-side request forgery6.5v3.10.3%2025-03-01Fix
CVE-2024-13611Better Messages WordPress plugin information disclosure7.5CNA v3.10.5%2025-03-01Fix
CVE-2024-13568Fluent Support WordPress plugin information disclosure7.5CNA v3.10.4%2025-03-01Fix
CVE-2024-13559TemplatesNext ToolKit WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-03-01
CVE-2024-13546GenerateBlocks WordPress plugin sensitive information exposure4.3CNA v3.10.4%2025-03-01Fix
CVE-2024-13518Simple:Press WordPress plugin cross-site request forgery to unauthorized post Editing4.3CNA v3.10.2%2025-03-01Fix
CVE-2024-13373Exertio Framework WordPress plugin unauthenticated arbitrary user password update8.1CNA v3.10.4%2025-03-01Fix
CVE-2024-13358themekraft BuddyPress WooCommerce My Account Integration missing authorization4.3CNA v3.10.3%2025-03-01Fix
CVE-2024-12824Nokri Job Board WordPress theme unauthenticated arbitrary password Change9.8CNA v3.12.4%2025-03-01NucleiFix
CVE-2024-12544devsoftbaltic SurveyJS Form Builder SurveyJS_DeleteFile callback missing authorization8.8CNA v3.10.8%2025-03-01Fix
CVE-2024-9217Currency Switcher for WooCommerce WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-01Fix
CVE-2024-9212SKU Generator for WooCommerce WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-03-01Fix
CVE-2024-56340IBM Cognos Analytics path traversal6.5CNA v3.10.8%2025-02-28Fix
CVE-2024-54175IBM MQ denial of service5.5CNA v3.10.1%2025-02-28Fix
CVE-2024-54173IBM MQ information disclosure4.7CNA v3.10.1%2025-02-28Fix
CVE-2024-44754Minut M2 flash key storage vulnerability6.8CISA ADP v3.10.2%2025-02-28
CVE-2024-13851Modal Portfolio WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.2%2025-02-28
CVE-2024-13832Ultra Addons Lite for Elementor WordPress plugin Restricted post disclosure4.3CNA v3.10.3%2025-02-28Fix
CVE-2024-13831Tabs for WooCommerce WordPress plugin Authentiated PHP object injection in product_has_custom_tabs7.2CNA v3.10.6%2025-02-28
CVE-2024-13796Post Grid and Gutenberg Blocks WordPress plugin information disclosure7.5v3.10.4%2025-02-28Fix
CVE-2024-13716Forex Calculators WordPress plugin missing authorization authenticated settings update4.3v3.10.3%2025-02-28Fix
CVE-2024-13638Order Attachments for WooCommerce WordPress plugin unauthenticated sensitive information exposure7.5v3.10.5%2025-02-28
CVE-2024-13469Pricing Table by PickPlugins WordPress plugin stored cross-site scripting5.4v3.10.2%2025-02-28
CVE-2024-12820MK Google Directions WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-02-28Fix
CVE-2024-12811Traveler WordPress theme local file inclusion8.8CNA v3.10.8%2025-02-28Fix
CVE-2024-10860XLPlugins NextMove Lite missing authorization4.3CNA v3.10.3%2025-02-28Fix
CVE-2024-9195WHMPress - WHMCS Client Area WordPress plugin authenticated (Subscriber+) arbitrary options update8.8CNA v3.10.4%2025-02-28
CVE-2024-9193WHMpress WordPress plugin unauthenticated local file inclusion to arbitrary options update9.8v3.13.3%2025-02-28NucleiFix
CVE-2024-9019SecuPress Free WordPress Security plugin stored cross-site scripting5.4v3.10.2%2025-02-28Fix
CVE-2024-8425WooCommerce Ultimate Gift Card WordPress plugin unauthenticated arbitrary file upload9.8v3.14.1%2025-02-28NucleiExploit codeFix
CVE-2024-8420DHVC Form WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.5%2025-02-28Fix
CVE-2024-1509Brocade ASCG web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 81007.6CNA v4.00.4%2025-02-28Fix
CVE-2024-58042Linux kernel rhashtable deadlock5.5v3.10.2%2025-02-27Fix
CVE-2024-58034Linux kernel Tegra20 EMC driver use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-58022Linux kernel TH1520 mailbox driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-58021Linux kernel HID Winwing driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-58020Linux kernel HID multitouch driver null pointer dereference5.5NVD v3.10.3%2025-02-27Fix
CVE-2024-58019Linux kernel nvkm/gsp null pointer dereference7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-58018Linux kernel Nouveau GSP command queue vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2024-58017Linux kernel printk log buffer sizing integer overflow5.5NVD v3.10.3%2025-02-27Fix
CVE-2024-58016Linux kernel safesetid policy interface vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2024-58015Linux kernel ath12k Wi-Fi driver out-of-bounds read7.1v3.10.2%2025-02-27Fix
CVE-2024-58014Linux kernel brcmsmac Wi-Fi driver out-of-bounds read7.1NVD v3.10.2%2025-02-27Fix
CVE-2024-58013Linux kernel Bluetooth MGMT advertising monitor use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-58012Linux kernel SOF Intel HDA DAI driver null pointer dereference5.5NVD v3.10.2%2025-02-27Fix
CVE-2024-58011Linux kernel int3472 sensor driver null pointer dereference5.5NVD v3.10.2%2025-02-27Fix
CVE-2024-58010Linux kernel binfmt_flat loader integer overflow7.8CNA v3.10.3%2025-02-27Fix
CVE-2024-58009Linux kernel L2CAP socket allocation null pointer dereference5.5NVD v3.10.2%2025-02-27Fix
CVE-2024-58008Linux kernel DCP trusted keys driver vulnerability7.8CNA v3.10.1%2025-02-27Fix
CVE-2024-58007Linux kernel socinfo out-of-bounds read7.1v3.10.3%2025-02-27Fix
CVE-2024-58006Linux kernel DesignWare PCIe endpoint driver vulnerability9.6CNA v3.10.2%2025-02-27Fix
CVE-2024-58005Linux kernel TPM eventlog driver vulnerability5.5NVD v3.10.3%2025-02-27Fix
CVE-2024-58004Linux kernel Intel IPU6 media driver memory corruption7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-58003Linux kernel ds90ub9x3 media driver vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-58002Linux kernel uvcvideo driver use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2024-58001Linux kernel OCFS2 symlink handling vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2024-58000Linux kernel io_uring vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2024-57999Linux kernel pseries IOMMU driver vulnerability8.8CNA v3.10.2%2025-02-27Fix
CVE-2024-57998Linux kernel OPP buffer overflow7.3CNA v3.10.2%2025-02-27Fix
CVE-2024-57997Linux kernel wcn36xx Wi-Fi driver vulnerability8.8CNA v3.10.3%2025-02-27Fix
CVE-2024-57996Linux kernel sch_sfq packet scheduler vulnerability7.8CNA v3.10.3%2025-02-27Fix
CVE-2024-57995Linux kernel ath12k Wi-Fi driver use-after-free8.8CNA v3.10.3%2025-02-27Fix
CVE-2024-57994Linux kernel ptr_ring improper locking5.5v3.10.2%2025-02-27Fix
CVE-2024-57993Linux kernel Thrustmaster HID driver vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2024-57992Linux kernel wilc1000 Wi-Fi driver vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2024-57991Linux kernel rtw89 Wi-Fi driver denial of service5.5v3.10.2%2025-02-27Fix
CVE-2024-57990Linux kernel mt7925 Wi-Fi driver off-by-one error7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-57989Linux kernel mt7925 Wi-Fi driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-57988Linux kernel btbcm null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-57987Linux kernel btrtl null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-57986Linux kernel HID core vulnerability7.1CNA v3.10.3%2025-02-27Fix
CVE-2024-57985Linux kernel scm null pointer dereference7.0CNA v3.10.2%2025-02-27Fix
CVE-2024-57984Linux kernel dw_i3c_master I3C driver use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-57983Linux kernel TH1520 mailbox driver out-of-bounds write7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-57982Linux kernel XFRM state lookup out-of-bounds read7.8CNA v3.10.3%2025-02-27Fix
CVE-2024-57981Linux kernel xHCI USB host controller driver null pointer dereference5.5NVD v3.10.3%2025-02-27Fix
CVE-2024-57980Linux kernel UVC video driver double free7.8NVD v3.10.3%2025-02-27Fix
CVE-2024-57979Linux kernel PPS driver use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2024-57978Linux kernel imx-jpeg driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-57977Linux kernel memory cgroup OOM handling denial of service5.5NVD v3.10.2%2025-02-27Fix
CVE-2024-57976Linux kernel Btrfs cow_file_range path incomplete cleanup7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-57975Linux kernel Btrfs delalloc nocow path incomplete cleanup7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-57974Linux kernel UDP socket rehash race condition4.7NVD v3.10.1%2025-02-27Fix
CVE-2024-57973Linux kernel cxgb4 RDMA driver integer overflow8.1CNA v3.10.7%2025-02-27Fix
CVE-2024-57953Linux kernel TPS6594 RTC driver integer overflow5.5v3.10.2%2025-02-27Fix
CVE-2024-57852Linux kernel smc null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-57834Linux kernel vidtv media driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2024-56812IBM EntireX information disclosure3.3CNA v3.10.2%2025-02-27Fix
CVE-2024-56811IBM EntireX information disclosure3.3CNA v3.10.1%2025-02-27Fix
CVE-2024-56810IBM EntireX information disclosure3.3CNA v3.10.1%2025-02-27Fix
CVE-2024-56496IBM EntireX information disclosure3.3CNA v3.10.1%2025-02-27Fix
CVE-2024-56495IBM EntireX information disclosure3.3CNA v3.10.1%2025-02-27Fix
CVE-2024-56494IBM EntireX information disclosure3.3CNA v3.10.1%2025-02-27Fix
CVE-2024-56493IBM EntireX information disclosure3.3CNA v3.10.1%2025-02-27Fix
CVE-2024-55160GFast /system/operLog/list SQL injection9.8CISA ADP v3.10.5%2025-02-27
CVE-2024-54957Nagios XI open redirect6.1CISA ADP v3.10.6%2025-02-27Fix
CVE-2024-54458Linux kernel UFS bsg queue use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2024-54456Linux kernel NFS sysfs RPC client naming out-of-bounds write7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-54170IBM EntireX denial of service5.5CNA v3.10.1%2025-02-27Fix
CVE-2024-54169IBM EntireX path traversal6.5CNA v3.10.5%2025-02-27Fix
CVE-2024-53944Tuoshi/Dionlink LT15D and LT21B 4G Wi-Fi devices formJsonAjaxReq endpoint command injection9.8CISA ADP v3.139.7%2025-02-27Emerging Threats
CVE-2024-53408AVE System Web Client cross-site scripting5.4CISA ADP v3.10.3%2025-02-27
CVE-2024-52560Linux kernel NTFS3 filesystem vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-52559Linux kernel MSM GPU driver integer overflow7.8CNA v3.10.2%2025-02-27Fix
CVE-2024-52557Linux kernel zynqmp_dp integer overflow5.5v3.10.2%2025-02-27Fix
CVE-2024-51139DrayTek Vigor2620 buffer overflow9.8CISA ADP v3.11.0%2025-02-27
CVE-2024-51138DrayTek Vigor2133 stack-based buffer overflow9.8CISA ADP v3.11.1%2025-02-27Fix
CVE-2024-49570Linux kernel Xe GPU driver tracing use-after-free7.8CISA ADP v3.10.2%2025-02-27Fix
CVE-2024-41340DrayTek Vigor2133 unrestricted file upload8.4CISA ADP v3.10.2%2025-02-27
CVE-2024-41339DrayTek Vigor2133 unrestricted file upload8.8CISA ADP v3.10.6%2025-02-27Fix
CVE-2024-41338DrayTek Vigor2133 null pointer dereference7.5CISA ADP v3.10.5%2025-02-27
CVE-2024-41336Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.37.5CISA ADP v3.10.4%2025-02-27
CVE-2024-41335Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.37.5CISA ADP v3.10.5%2025-02-27
CVE-2024-41334DrayTek Vigor2133 improper certificate validation8.8CISA ADP v3.10.4%2025-02-27Fix
CVE-2024-38292Extreme Networks Xiq-se path traversal9.8CISA ADP v3.10.6%2025-02-27Fix
CVE-2024-38291Extreme Networks Xiq-se insufficiently protected credentials8.8CISA ADP v3.10.4%2025-02-27Fix
CVE-2024-38290Extreme Networks Xiq-se information disclosure5.3CISA ADP v3.10.3%2025-02-27Fix
CVE-2024-37567Infoblox NIOS improper access control9.1CISA ADP v3.10.4%2025-02-27Fix
CVE-2024-37566Infoblox NIOS improper authentication9.8CISA ADP v3.10.5%2025-02-27Fix
CVE-2024-36047Infoblox NIOS improper input validation9.8CISA ADP v3.10.4%2025-02-27Fix
CVE-2024-36046Infoblox NIOS improper privilege management9.8CISA ADP v3.10.4%2025-02-27Fix
CVE-2024-13907Total Upkeep WordPress plugin server-side request forgery6.5v3.10.5%2025-02-27Fix
CVE-2024-13905OneStore Sites WordPress plugin unauthenticated blind server-side request forgery9.1v3.10.4%2025-02-27Fix
CVE-2024-13734Card Elements for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-27Fix
CVE-2024-13647School Management System WordPress plugin cross-site request forgery4.3v3.10.2%2025-02-27
CVE-2024-13402BuddyBoss Platform WordPress plugin stored cross-site scripting5.4v3.10.2%2025-02-27Fix
CVE-2024-13217Jeg Elementor Kit WordPress plugin sensitive information exposure4.3v3.10.4%2025-02-27Fix
CVE-2024-13148SQLi in Yukseloglu Filter's B2B Login Platform9.8CNA v3.10.4%2025-02-27Fix
CVE-2024-10918Stack-based buffer overflow in libmodbus library9.8NVD v3.10.6%2025-02-27Fix
CVE-2024-9334Information disclosure in E-Kent's Pallium Vehicle Tracking8.2CNA v3.10.4%2025-02-27Fix
CVE-2024-9285Tu Yafeng Via Browser Javascript Bridge cross-site scripting5.3CNA v4.00.4%2025-02-27
CVE-2024-6261Image Photo Gallery Final Tiles Grid WordPress plugin DOM-based stored cross-site scripting5.4v3.10.3%2025-02-27Fix
CVE-2024-5848Reflected cross-site scripting (XSS) in multiple WSO2 Products due to improper input validation6.1CNA v3.10.2%2025-02-27Fix
CVE-2024-2321Incorrect authorization in multiple WSO2 Products allows API Access via Refresh Token5.6CNA v3.10.2%2025-02-27Fix
CVE-2024-2297Bricks WordPress theme privilege escalation8.8v3.10.4%2025-02-27Fix
CVE-2024-0392WSO2 Enterprise Integrator management console cross-site request forgery5.4CNA v3.10.1%2025-02-27Fix
CVE-2024-57423Vishalmathur CloudClassroom-PHP-Project CloudClassroom-PHP Project v1.0 cross-site scripting6.1CISA ADP v3.10.5%2025-02-26
CVE-2024-57040TP-Link Tl-wr845n hard-coded credentials9.8CISA ADP v3.11.2%2025-02-26Exploit code
CVE-2024-55581Adacore Ada Web Server improper certificate validation7.4CISA ADP v3.10.3%2025-02-26
CVE-2024-53573changeweb Unifiedtransform improper access control9.8CISA ADP v3.10.5%2025-02-26
CVE-2024-53427jqlang jq type confusion8.1CNA v3.10.4%2025-02-26Fix
CVE-2024-52925OPSWAT MetaDefender Kiosk code injection6.8CNA v3.10.3%2025-02-26Fix
CVE-2024-50696Sungrowpower Winet-s download without integrity check7.5CISA ADP v3.10.2%2025-02-26Fix
CVE-2024-50693Sungrowpower iSolarCloud insecure direct object reference9.1CISA ADP v3.10.5%2025-02-26Fix
CVE-2024-50691Sungrowpower iSolarCloud improper certificate validation7.4CISA ADP v3.10.2%2025-02-26Fix
CVE-2024-50689Sungrowpower iSolarCloud insecure direct object reference9.1CISA ADP v3.10.5%2025-02-26Fix
CVE-2024-50688Sungrowpower iSolarCloud hard-coded credentials9.8CISA ADP v3.10.5%2025-02-26Fix
CVE-2024-50687Sungrowpower iSolarCloud insecure direct object reference9.1CISA ADP v3.10.4%2025-02-26Fix
CVE-2024-50686Sungrowpower iSolarCloud insecure direct object reference9.1CISA ADP v3.10.5%2025-02-26Fix
CVE-2024-50685Sungrowpower iSolarCloud insecure direct object reference9.1CISA ADP v3.10.5%2025-02-26Fix
CVE-2024-50684Sungrowpower iSolarCloud insufficient randomness6.5CISA ADP v3.10.3%2025-02-26Fix
CVE-2024-47053mautic/core improper authorization in Reporting API7.7CNA v3.10.7%2025-02-26Fix
CVE-2024-47051mautic/core remote code execution and file deletion in Asset Uploads9.1CNA v3.11.8%2025-02-26Exploit codeFix
CVE-2024-46226HelpDeskZ A stored cross-site scripting4.8CISA ADP v3.10.3%2025-02-26Exploit code
CVE-2024-39441UNISOC chipsets wifi display missing authorization7.1CNA v3.10.1%2025-02-26Fix
CVE-2024-13803Essential Blocks WordPress plugin stored cross-site scripting5.4v3.10.5%2025-02-26Fix
CVE-2024-13678R3W Instafeed WordPress plugin reflected XSS6.1CISA ADP v3.10.4%2025-02-26
CVE-2024-13669CalendApp WordPress plugin reflected XSS6.1CISA ADP v3.10.4%2025-02-26
CVE-2024-13634Post Sync WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-02-26Nuclei
CVE-2024-13633Simple Catalogue WordPress plugin reflected XSS7.1CISA ADP v3.10.4%2025-02-26
CVE-2024-13632WP Extra Fields WordPress plugin reflected XSS7.1CISA ADP v3.10.4%2025-02-26
CVE-2024-13631OM Stripe WordPress plugin reflected XSS7.1CISA ADP v3.10.4%2025-02-26
CVE-2024-13630Mahinsha NewsTicker reflected cross-site scripting6.1CISA ADP v3.10.6%2025-02-26Nuclei
CVE-2024-13629Pushbiz WordPress plugin reflected XSS6.1CISA ADP v3.10.4%2025-02-26
CVE-2024-13628WP Pricing Table WordPress plugin reflected XSS6.1CISA ADP v3.10.7%2025-02-26Nuclei
CVE-2024-13624WPMovieLibrary WordPress plugin reflected XSS7.1CISA ADP v3.10.7%2025-02-26Nuclei
CVE-2024-13571Post Timeline for WordPress reflected XSS7.1CISA ADP v3.10.4%2025-02-26Fix
CVE-2024-13560Subscriptions and Memberships for PayPal WordPress plugin cross-site request forgery4.3CNA v3.10.3%2025-02-26Fix
CVE-2024-13113Countdown Timer for Elementor for WordPress Contributor+ stored XSS5.9CISA ADP v3.10.3%2025-02-26Fix
CVE-2024-12878Custom Block Builder Lazy Blocks WordPress plugin reflected XSS7.1CISA ADP v3.10.6%2025-02-26NucleiFix
CVE-2024-12737WP BASE Booking of Appointments, Services and Events WordPress plugin reflected XSS6.1CISA ADP v3.10.6%2025-02-26NucleiFix
CVE-2024-12434SureMembers WordPress plugin sensitive information exposure5.3CNA v3.10.6%2025-02-26Fix
CVE-2024-10563WooCommerce Cart Count Shortcode WordPress plugin Contributor+ XSS5.4CISA ADP v3.10.4%2025-02-26Fix
CVE-2024-10483SimplePress Forum WordPress plugin reflected XSS7.1CISA ADP v3.10.4%2025-02-26Fix
CVE-2024-10152Simple Certain Time to Show Content WordPress plugin reflected XSS7.1CISA ADP v3.10.6%2025-02-26NucleiFix
CVE-2024-6810Quiz Organizer WordPress plugin authenticated (Administrator+) stored cross-site scripting4.4CNA v3.10.5%2025-02-26
CVE-2024-54444Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-02-25Fix
CVE-2024-53879NVIDIA CUDA Toolkit improper quantity validation2.8CNA v3.10.2%2025-02-25Fix
CVE-2024-53878NVIDIA CUDA Toolkit improper quantity validation2.8CNA v3.10.2%2025-02-25Fix
CVE-2024-53877NVIDIA CUDA Toolkit null pointer dereference3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53876NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53875NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53874NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53873NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53872NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53871NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-53870NVIDIA CUDA Toolkit out-of-bounds read3.3CNA v3.10.3%2025-02-25Fix
CVE-2024-51539Dell Secure Connect Gateway-Application SQL injection2.3CNA v3.10.2%2025-02-25Fix
CVE-2024-45426Zoom Workplace Apps Incorrect Ownership Assignment4.9CNA v3.10.3%2025-02-25Fix
CVE-2024-45425Zoom Workplace Apps incorrect user management4.9CNA v3.10.3%2025-02-25Fix
CVE-2024-45424Zoom Workplace Apps business logic error5.3CNA v3.10.4%2025-02-25Fix
CVE-2024-45421Zoom Apps buffer overflow8.5CNA v3.10.6%2025-02-25Fix
CVE-2024-45418Zoom Apps for macOS symbolic link following5.4CNA v3.10.5%2025-02-25Fix
CVE-2024-45417Zoom Apps for macOS uncontrolled resource consumption6.0CNA v3.10.2%2025-02-25Fix
CVE-2024-36259Odoo Community mail module improper access control7.5CNA v3.10.7%2025-02-25Fix
CVE-2024-34036An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp.4.3CISA ADP v3.10.2%2025-02-25
CVE-2024-34035O-RAN Near Realtime RIC e2mgr denial of service5.7CISA ADP v3.10.2%2025-02-25
CVE-2024-34034FlexRIC Near-RT RIC E42 subscription handling denial of service5.7CISA ADP v3.10.2%2025-02-25
CVE-2024-30150An unauthenticated privilege escalation vulnerability affects HCL MyCloud5.3CNA v3.10.3%2025-02-25Fix
CVE-2024-27246Zoom Workplace Apps and SDKs use-after-free4.3CNA v3.10.6%2025-02-25Fix
CVE-2024-27245Zoom Workplace Apps and SDKs buffer overflow4.3CNA v3.10.6%2025-02-25Fix
CVE-2024-27239Zoom Workplace Apps and SDKs divide by zero4.3CNA v3.10.6%2025-02-25Fix
CVE-2024-13695Enfold WordPress theme authenticated (Subscriber+) server-side request forgery via attachment_id5.4v3.10.3%2025-02-25Fix
CVE-2024-13693Enfold WordPress theme unauthorized access5.3CNA v3.10.3%2025-02-25Fix
CVE-2024-13494WordPress File Upload plugin cross-site request forgery in wfu_file_details4.3CNA v3.10.2%2025-02-25Fix
CVE-2024-12368Odoo Community auth_oauth module improper access control8.1CNA v3.10.7%2025-02-25Fix
CVE-2024-11955GLPI index.php redirect6.1v3.10.5%2025-02-25Fix
CVE-2024-10545NextGEN Gallery WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.3%2025-02-25Fix
CVE-2024-0148NVIDIA IGX Orin code execution7.6CNA v3.10.3%2025-02-25Fix
CVE-2024-57685SparkShop command injection5.3CISA ADP v3.10.4%2025-02-24
CVE-2024-57608Via Browser mark.via.Shell component command injection6.5CISA ADP v3.10.4%2025-02-24
CVE-2024-57026Tawk.to cross-site scripting6.1v3.10.4%2025-02-24
CVE-2024-56897Yitechnology Yi Car Dashcam HTTP server improper access control9.8v3.10.7%2025-02-24
CVE-2024-56525Public Knowledge Project OJS, OMP and OPS User XML Plugin XML external entity injection9.8CISA ADP v3.10.4%2025-02-24
CVE-2024-55898IBM i privilege escalation8.5CNA v3.10.4%2025-02-24Fix
CVE-2024-54820XOne Web Monitor login page SQL injection9.8CISA ADP v3.11.2%2025-02-24
CVE-2024-53544NovaCHRON Zeitsysteme Smart Time Plus MySQLConnection getCookieNames endpoint SQL injection9.8CISA ADP v3.10.4%2025-02-24
CVE-2024-53543NovaCHRON Zeitsysteme Smart Time Plus MySQLConnection addProject endpoint SQL injection5.4CISA ADP v3.10.2%2025-02-24
CVE-2024-53542NovaCHRON Zeitsysteme Smart Time Plus iclock Settings endpoint improper access control6.5CISA ADP v3.10.2%2025-02-24
CVE-2024-13822Total Contest Lite WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-02-24Fix
CVE-2024-13605Form Maker by 10Web WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.4%2025-02-24Fix
CVE-2024-12918SQLi in Agito Computer's Health4All8.8CNA v3.10.4%2025-02-24Fix
CVE-2024-12917Improper access control in Agito Computer's Health4All8.3CNA v3.10.4%2025-02-24Fix
CVE-2024-12916SQLi in Agito Computer's Life4All8.8CNA v3.10.4%2025-02-24Fix
CVE-2024-12308Logo Slider WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.3%2025-02-24Fix
CVE-2024-5174Broken authentication in Gliffy5.3CNA v4.00.4%2025-02-24Fix
CVE-2024-13728Accept Donations with PayPal and Stripe WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-02-23Fix
CVE-2024-52939GPU DDK RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write7.8CISA ADP v3.10.2%2025-02-22Fix
CVE-2024-47896Imagination Technologies Graphics DDK out-of-range pointer offset3.3CISA ADP v3.10.2%2025-02-22Fix
CVE-2024-46975GPU DDK rgxfw_write_robustness_buffer allows arbitrary catreg set mapping7.9CISA ADP v3.10.2%2025-02-22Fix
CVE-2024-45674IBM Security Verify Bridge information disclosure3.3CNA v3.10.2%2025-02-22Fix
CVE-2024-22341IBM Watson Query on Cloud Pak for Data information disclosure5.3CNA v3.10.5%2025-02-22Fix
CVE-2024-13899Mambo Importer WordPress plugin authenticated (Administrator+) PHP object injection7.2CNA v3.10.7%2025-02-22
CVE-2024-13873WP Job Portal WordPress plugin insecure direct object reference4.3v3.10.3%2025-02-22Fix
CVE-2024-13869Migration, Backup, Staging WPvivid WordPress plugin arbitrary file upload7.2CNA v3.12.3%2025-02-22Exploit codeFix
CVE-2024-13798Post Grid and Gutenberg Blocks ComboBlocks WordPress plugin unauthenticated Paid order creation5.3v3.10.3%2025-02-22Fix
CVE-2024-13564Rife Elementor Extensions and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-22Fix
CVE-2024-13474LTL Freight Quotes Purolator Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-02-22Fix
CVE-2024-12577Imagination Technologies Graphics DDK rgxfw_pcset_ungrab out-of-bounds write7.3CISA ADP v3.10.2%2025-02-22Fix
CVE-2024-12467Pago por Redsys WordPress plugin reflected cross-site scripting6.1v3.10.4%2025-02-22Fix
CVE-2024-12038Post Form WordPress plugin stored cross-site scripting5.4v3.10.2%2025-02-22Fix
CVE-2024-57176Antabot White-Jotter path traversal7.6CISA ADP v3.10.5%2025-02-21
CVE-2024-55159GFast /system/loginLog/list SQL injection4.2CISA ADP v3.10.2%2025-02-21
CVE-2024-55156Java SDK for CloudEvents deserializeArgs method XML external entity injection5.5CISA ADP v3.10.2%2025-02-21
CVE-2024-45673IBM Security Verify Bridge information disclosure5.5CNA v3.10.1%2025-02-21Fix
CVE-2024-38657Ivanti Connect Secure external control of a file path4.9NVD v3.11.6%2025-02-21Fix
CVE-2024-13900Head, Footer and Post Injections WordPress plugin PHP code injection in Multisite Environments7.2v3.10.4%2025-02-21Fix
CVE-2024-13883WPUpper Share Buttons WordPress plugin cross-site request forgery to Custom CSS update4.3CNA v3.10.2%2025-02-21Fix
CVE-2024-13846Indeed Ultimate Learning Pro WordPress plugin SQL injection4.9v3.10.4%2025-02-21Fix
CVE-2024-13818Registration Forms WordPress plugin information disclosure7.5v3.10.5%2025-02-21Fix
CVE-2024-137513D Photo Gallery WordPress plugin missing authorization authenticated stored cross-site scripting5.4v3.10.2%2025-02-21
CVE-2024-13713WPExperts Square For GiveWP WordPress plugin authenticated (Subscriber+) SQL injection6.5v3.10.4%2025-02-21Fix
CVE-2024-13672Mini Course Generator WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-21Fix
CVE-2024-13648Maps for WP WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-02-21Fix
CVE-2024-13585Ajax Search Lite WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.4%2025-02-21Fix
CVE-2024-13537C9 Blocks WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.3%2025-02-21
CVE-2024-13461Autoship Cloud for WooCommerce Subscription Products WordPress plugin stored cross-site scripting5.4v3.10.2%2025-02-21Fix
CVE-2024-13455igumbi Online Booking WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-02-21Fix
CVE-2024-13388TCBD Tooltip WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-02-21
CVE-2024-13379C9 Admin Dashboard WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-21
CVE-2024-13353Responsive Addons for Elementor WordPress plugin local file inclusion8.8CNA v3.10.7%2025-02-21Fix
CVE-2024-13314Carousel, Slider, Gallery by WP Carousel WordPress plugin Admin+ stored XSS3.5CISA ADP v3.10.4%2025-02-21Fix
CVE-2024-13235Pinpoint Booking System #1 WordPress Booking plugin authenticated (Subscriber+) SQL injection6.5v3.10.4%2025-02-21Fix
CVE-2024-12452Ziggeo WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-02-21Fix
CVE-2024-12276Ultimate Member WordPress plugin authenticated SQL injection6.5v3.10.4%2025-02-21Fix
CVE-2024-11260Events Manager Calendar, Bookings, Tickets, and more! WordPress plugin unauthenticated SQL injection7.5CNA v3.10.6%2025-02-21Fix
CVE-2024-10222SVG Support WordPress plugin authenticated (Author+) stored cross-site scripting via SVG file upload5.4v3.10.5%2025-02-21Fix
CVE-2024-9150Code injection in Wyn Enterprise8.7CNA v4.00.5%2025-02-21Fix
CVE-2024-57716AutoQueryable leaks sensitive information7.5CISA ADP v3.10.5%2025-02-20
CVE-2024-57401Uniclare Student portal v.2 and SQL injection9.8CISA ADP v3.10.9%2025-02-20
CVE-2024-55457MasterSAM Star Gate 11 downloadService path traversal6.5CISA ADP v3.13.1%2025-02-20Nuclei
CVE-2024-54961Nagios XI information disclosure6.5CISA ADP v3.11.6%2025-02-20
CVE-2024-54960Nagios XI SQL injection6.5CISA ADP v3.11.4%2025-02-20
CVE-2024-54959Nagios XI cross-site scripting6.1CISA ADP v3.11.0%2025-02-20
CVE-2024-54958Nagios XI cross-site scripting6.1CISA ADP v3.11.0%2025-02-20
CVE-2024-54756ZDoom Team GZDoom ZScript interpreter remote code execution9.8CISA ADP v3.13.1%2025-02-20Exploit code
CVE-2024-49782IBM OpenPages improper certificate validation6.8CNA v3.10.4%2025-02-20Fix
CVE-2024-49781IBM OpenPages XML external entity injection7.1CNA v3.10.5%2025-02-20Fix
CVE-2024-49780IBM OpenPages path traversal5.3CNA v3.10.6%2025-02-20Fix
CVE-2024-49779IBM OpenPages cross-site request forgery4.3CNA v3.10.2%2025-02-20Fix
CVE-2024-49355IBM OpenPages with Watson system tracing log injection5.3CNA v3.10.3%2025-02-20Fix
CVE-2024-49344IBM OpenPages session fixation4.3CNA v3.10.3%2025-02-20Fix
CVE-2024-49337IBM OpenPages HTML injection5.4CNA v3.10.3%2025-02-20Fix
CVE-2024-46933Atos Eviden BullSequana XH2140 BMC denial of service7.7CNA v3.10.4%2025-02-20
CVE-2024-43196IBM OpenPages with Watson Questionnaires application vulnerability4.3CNA v3.10.2%2025-02-20Fix
CVE-2024-37363Hitachi Vantara Pentaho Business Analytics Server incorrect authorization6.5CNA v3.10.3%2025-02-20Fix
CVE-2024-37362Hitachi Vantara Pentaho Data Integration and Analytics insufficiently protected credentials6.3CNA v3.10.3%2025-02-20Fix
CVE-2024-37361Hitachi Vantara Pentaho Business Analytics Server deserialization of untrusted data9.9CNA v3.10.5%2025-02-20Fix
CVE-2024-13888WPMobile.App WordPress plugin open redirect via redirect parameter6.1NVD v3.10.8%2025-02-20NucleiFix
CVE-2024-13855Prime Addons for Elementor WordPress plugin insecure direct object reference4.3v3.10.3%2025-02-20Fix
CVE-2024-13849Cookie Notice Bar WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.3%2025-02-20
CVE-2024-13802Bandsintown Events WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-02-20Fix
CVE-2024-13792Ex-Themes WooCommerce Food shortcode handler code injection9.8v3.10.5%2025-02-20Fix
CVE-2024-13789Ravpage WordPress plugin PHP object injection9.8CNA v3.10.8%2025-02-20Fix
CVE-2024-13753Ultimate Classified Listings WordPress plugin cross-site request forgery to account takeover8.8v3.10.3%2025-02-20Fix
CVE-2024-13748Ultimate Classified Listings Authenticated stored cross-site scripting4.8v3.10.2%2025-02-20Fix
CVE-2024-13520Gift Cards WordPress plugin missing authorization unauthenticated Price, Date, and Note Updates5.3CNA v3.10.3%2025-02-20Fix
CVE-2024-13476LTL Freight Quotes GlobalTranz Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-02-20Fix
CVE-2024-13445Elementor Website Builder More Than Just a Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-20Fix
CVE-2024-13155Unlimited Elements For Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-20Fix
CVE-2024-12284NetScaler Console authenticated privilege escalation8.8CNA v4.013.3%2025-02-20Emerging ThreatsFix
CVE-2024-7141Gliffy Online cross-site request forgery5.9CNA v4.00.2%2025-02-20Fix
CVE-2024-6697Hitachi Vantara Pentaho Business Analytics Server denial of service6.5CNA v3.10.3%2025-02-20Fix
CVE-2024-6696Hitachi Vantara Pentaho Business Analytics Server insufficient granularity of access control4.9CNA v3.10.4%2025-02-20Fix
CVE-2024-6432Content Blocks (Custom Post Widget) WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-20Fix
CVE-2024-57262Pengutronix barebox integer overflow7.1CNA v3.10.3%2025-02-19Fix
CVE-2024-57261Pengutronix barebox integer overflow7.1CNA v3.10.3%2025-02-19Fix
CVE-2024-53974Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-02-19Fix
CVE-2024-52902IBM Cognos Controller information disclosure8.8CNA v3.10.4%2025-02-19Fix
CVE-2024-52541Dell Client Platform BIOS weak authentication8.2CNA v3.10.2%2025-02-19Fix
CVE-2024-45777GRUB2: Grub-core/gettext: Integer overflow leads to heap OOB write6.7CNA v3.10.3%2025-02-19Fix
CVE-2024-45084IBM Cognos Controller CSV injection8.0CNA v3.10.4%2025-02-19Fix
CVE-2024-45081IBM Cognos Controller incorrect authorization6.5CNA v3.10.3%2025-02-19Fix
CVE-2024-37360Hitachi Vantara Pentaho Business Analytics Server Analyzer plugin cross-site scripting4.4CNA v3.10.3%2025-02-19Fix
CVE-2024-37359Hitachi Vantara Pentaho Business Analytics Server server side request forgery8.6CNA v3.10.5%2025-02-19Fix
CVE-2024-28780IBM Cognos Controller information disclosure5.9CNA v3.10.2%2025-02-19Fix
CVE-2024-28777IBM Cognos Controller code execution8.8CNA v3.10.6%2025-02-19Fix
CVE-2024-28776IBM Cognos Controller cross-site scripting5.4CNA v3.10.2%2025-02-19Fix
CVE-2024-13854Education Addon for Elementor WordPress plugin insecure direct object reference4.3v3.10.3%2025-02-19
CVE-2024-13799User Private Files WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-19Fix
CVE-2024-13736Pure Chat Live Chat and More! WordPress plugin reflected cross-site scripting6.1v3.10.5%2025-02-19Fix
CVE-2024-13719PeproDev Ultimate Invoice WordPress plugin insecure direct object reference5.3v3.10.5%2025-02-19Fix
CVE-2024-13712Pollin WordPress plugin authenticated (Admin+) SQL injection4.9v3.10.5%2025-02-19
CVE-2024-13711Pollin WordPress plugin reflected cross-site scripting6.1v3.10.3%2025-02-19
CVE-2024-13679Widget BUY.BOX WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-02-19
CVE-2024-13676Categorized Gallery WordPress plugin authenticated (Contributor+) SQL injection6.5CNA v3.10.5%2025-02-19
CVE-2024-13674Cosmic Blocks (40+) Content Editor Blocks Collection WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-19
CVE-2024-13663Coaching Staffs WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-02-19Fix
CVE-2024-13660Responsive Flickr Slideshow WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-02-19Fix
CVE-2024-13657Store Locator Widget WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-02-19Fix
CVE-2024-13592Team Builder For WPBakery Page Builder WordPress plugin local file inclusion8.8v3.10.9%2025-02-19
CVE-2024-13591Team Builder For WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.4%2025-02-19
CVE-2024-13589YouTube Playlists with Schema WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-19
CVE-2024-13534Small Package Quotes Worldwide Express Edition WordPress plugin unauthenticated SQL injection7.5v3.10.5%2025-02-19Fix
CVE-2024-13533Small Package Quotes USPS Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-02-19Fix
CVE-2024-13508Booking Package WordPress plugin reflected cross-site scripting via Locale parameter6.1CNA v3.10.3%2025-02-19Fix
CVE-2024-13491Small Package Quotes For Customers of FedEx WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-02-19Fix
CVE-2024-13489LTL Freight Quotes Old Dominion Edition WordPress plugin unauthenticated SQL injection7.5v3.10.8%2025-02-19Exploit codeFix
CVE-2024-13485LTL Freight Quotes ABF Freight Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.11.0%2025-02-19Exploit codeFix
CVE-2024-13483LTL Freight Quotes SAIA Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.10.8%2025-02-19Fix
CVE-2024-13481LTL Freight Quotes R+L Carriers Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.11.0%2025-02-19Fix
CVE-2024-13479LTL Freight Quotes SEFL Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.10.8%2025-02-19Exploit codeFix
CVE-2024-13478LTL Freight Quotes TForce Edition WordPress plugin unauthenticated SQL injection7.5CNA v3.11.2%2025-02-19Exploit codeFix
CVE-2024-13468solwininfotech Trash Duplicate and 301 Redirect duplicates-action-top action missing authorization7.5CNA v3.10.5%2025-02-19Fix
CVE-2024-13462WP Wiki Tooltip WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2025-02-19Fix
CVE-2024-13443Easypromos WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.3%2025-02-19Fix
CVE-2024-13405Apptivo Business Site CRM WordPress plugin cross-site request forgery to IP Address block4.3CNA v3.10.2%2025-02-19
CVE-2024-13390ADFO Custom data in admin dashboard WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-19
CVE-2024-13364Raptive Ads WordPress plugin missing authorization to unauthenticated Data/Settings reset5.3CNA v3.10.5%2025-02-19Fix
CVE-2024-13363Raptive Ads WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-02-19Fix
CVE-2024-13339DeBounce Email Validator WordPress plugin cross-site request forgery to stored cross-site scripting5.4v3.10.2%2025-02-19Fix
CVE-2024-13336Exeebit Disable Auto Updates cross-site request forgery4.3v3.10.2%2025-02-19
CVE-2024-13231WordPress Portfolio Builder WordPress plugin unauthorized access5.3CNA v3.10.5%2025-02-19
CVE-2024-12522Yay! Forms WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-02-19Fix
CVE-2024-12339Digihood HTML Sitemap WordPress plugin reflected cross-site scripting via channel6.1CNA v3.10.4%2025-02-19
CVE-2024-12173Master Slider WordPress plugin Editor+ stored XSS3.5CISA ADP v3.10.3%2025-02-19Fix
CVE-2024-12069Lexicata WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-02-19
CVE-2024-11778CanadaHelps Embedded Donation WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-02-19Fix
CVE-2024-11753UMich OIDC Login WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2025-02-19
CVE-2024-11582Subscribe2 WordPress plugin stored cross-site scripting7.2CNA v3.10.3%2025-02-19Fix
CVE-2024-11335UltraEmbed WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-19
CVE-2024-5706Hitachi Vantara Pentaho Data Integration and Analytics improper control of resource identifiers8.8CNA v3.10.7%2025-02-19Fix
CVE-2024-5705Hitachi Vantara Pentaho Business Analytics Server incorrect authorization8.8CNA v3.10.5%2025-02-19Fix
CVE-2024-57964Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program7.3CNA v3.10.2%2025-02-18Fix
CVE-2024-57963Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER7.3CNA v3.10.2%2025-02-18Fix
CVE-2024-57259denx U-Boot off-by-one error6.8NVD v3.10.4%2025-02-18Fix
CVE-2024-57258denx U-Boot integer overflow7.8v3.10.2%2025-02-18Fix
CVE-2024-57257denx U-Boot uncontrolled recursion2.4v3.10.3%2025-02-18Fix
CVE-2024-57256denx U-Boot ext4fs_read_symlink in Das integer overflow6.8NVD v3.10.4%2025-02-18Fix
CVE-2024-57255denx U-Boot sqfs_resolve_symlink in Das integer overflow6.8NVD v3.10.4%2025-02-18Fix
CVE-2024-57254denx U-Boot sqfs_inode_size in Das integer overflow6.8NVD v3.10.4%2025-02-18Fix
CVE-2024-57056WombatDialer session logging vulnerability5.4CISA ADP v3.10.3%2025-02-18
CVE-2024-57055WombatDialer missing authentication5.0CISA ADP v3.10.3%2025-02-18
CVE-2024-57046NETGEAR DGN2200 improper authentication8.8CISA ADP v3.12.1%2025-02-18NucleiFix
CVE-2024-57045D-Link Dir-859 A3 improper authentication9.8CISA ADP v3.132.2%2025-02-18Nuclei
CVE-2024-56883Sage Dpw improper access control8.1CISA ADP v3.10.7%2025-02-18
CVE-2024-56882Sage Dpw cross-site scripting5.4CISA ADP v3.10.4%2025-02-18
CVE-2024-56171libxml2 use-after-free9.8v3.11.2%2025-02-18Fix
CVE-2024-56000K Elements WordPress plugin unauthenticated account takeover9.8CNA v3.10.5%2025-02-18Fix
CVE-2024-55460BoardRoom Limited Dividend Distribution Tax Election System login page SQL injection9.8CISA ADP v3.10.5%2025-02-18
CVE-2024-51505Atos Eviden IDRA Config Admin role race condition8.0CNA v3.10.3%2025-02-18
CVE-2024-50609treasure-data Fluent Bit null pointer dereference7.5CISA ADP v3.11.1%2025-02-18Fix
CVE-2024-50608treasure-data Fluent Bit null pointer dereference7.5CISA ADP v3.11.1%2025-02-18Fix
CVE-2024-49589Foundry artifacts denial of service6.5CNA v3.10.5%2025-02-18Fix
CVE-2024-45783Red Hat Enterprise Linux 9 grub2: Fs/hfs+: Refcount can be decremented twice4.4CNA v3.10.2%2025-02-18Fix
CVE-2024-45781Red Hat Enterprise Linux 10 grub2: Fs/ufs: Oob write in the heap6.7CNA v3.10.3%2025-02-18Fix
CVE-2024-45776GRUB2 gettext .mo file parser out-of-bounds write6.7CNA v3.10.3%2025-02-18Fix
CVE-2024-45775Red Hat Enterprise Linux 9 grub2: Commands/extcmd: Missing check for failed allocation5.2CNA v3.10.3%2025-02-18Fix
CVE-2024-45774Red Hat Enterprise Linux 9 grub2: Reader/jpeg: Heap OOB write during jpeg parsing6.7CNA v3.10.3%2025-02-18Fix
CVE-2024-45320FUJIFILM Business Innovation DocuPrint CP225 w out-of-bounds write6.5CNA v3.00.2%2025-02-18
CVE-2024-39328Atos Eviden IDRA and IDCA insecure permissions6.8CNA v3.10.4%2025-02-18
CVE-2024-39327Atos Eviden IDRA CA signing improper access control9.9CNA v3.10.4%2025-02-18
CVE-2024-13852Option Editor WordPress plugin cross-site request forgery to arbitrary options update8.8CNA v3.10.3%2025-02-18
CVE-2024-13848Reaction Buttons WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.2%2025-02-18
CVE-2024-13797PressLayouts PressMart shortcode handler code injection9.8v3.10.5%2025-02-18Fix
CVE-2024-13795Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-02-18Fix
CVE-2024-13783FormCraft WordPress plugin missing authorization to plugin data export in formcraft-main.php4.3CNA v3.10.4%2025-02-18Fix
CVE-2024-13743Wonder Video Embed WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-18Fix
CVE-2024-13741ProfileGrid WordPress plugin server-side request forgery5.4CNA v3.10.4%2025-02-18Fix
CVE-2024-13740ProfileGrid WordPress plugin insecure direct object reference4.3CNA v3.10.3%2025-02-18Fix
CVE-2024-13725Keap Official Opt-in Forms WordPress plugin unauthenticated limited local file inclusion9.8CNA v3.11.4%2025-02-18Fix
CVE-2024-13718Flexible Wishlist for WooCommerce WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-02-18Fix
CVE-2024-13704Super Testimonials WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.3%2025-02-18Fix
CVE-2024-13691Uncode WordPress theme authenticated (Subscriber+) arbitrary file read in uncode_recordMedia6.5CNA v3.10.4%2025-02-18Fix
CVE-2024-13689Uncode Core WordPress plugin arbitrary shortcode execution in uncode_get_medias6.3CNA v3.10.5%2025-02-18Fix
CVE-2024-13687Team Builder Meet the Team WordPress plugin missing authorization authenticated settings update4.3CNA v3.10.3%2025-02-18
CVE-2024-13684Reset WordPress plugin cross-site request forgery to Database reset8.1CNA v3.10.2%2025-02-18Fix
CVE-2024-13681Uncode WordPress theme unauthenticated arbitrary file read in uncode_admin_get_oembed7.5CNA v3.10.6%2025-02-18Fix
CVE-2024-13677GetBookingsWp - Appointments and Bookings Plugin Basic Version WordPress plugin privilege escalation8.8CNA v3.10.5%2025-02-18
CVE-2024-13667Uncode WordPress theme authenticated (Subscriber+) stored cross-site scripting via mle-description5.4CNA v3.10.2%2025-02-18Fix