CVE-2024 records published after 2024
Page four of six: records 3,001 to 4,000 of the 5,832 published after 2024, newest first. The first page carries the figures for After 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-13622 | File Uploads Addon for WooCommerce WordPress plugin unauthenticated sensitive information exposure | 7.5CNA v3.1 | 0.5% | 2025-02-18 | Fix |
| CVE-2024-13609 | 1 Click WordPress Migration Plugin WordPress plugin information disclosure | 5.9CNA v3.1 | 1.6% | 2025-02-18 | NucleiFix |
| CVE-2024-13595 | Simple Signup Form WordPress plugin authenticated (Contributor+) SQL injection | 6.5v3.1 | 0.4% | 2025-02-18 | |
| CVE-2024-13588 | Simplebooklet PDF Viewer and Embedder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-13587 | Zigaform WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-13582 | Simple Pricing Tables For WPBakery Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | |
| CVE-2024-13581 | Simple Charts WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | |
| CVE-2024-13579 | WP-Asambleas WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | |
| CVE-2024-13578 | WP-BibTeX WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | |
| CVE-2024-13577 | CATS Job Listings WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | |
| CVE-2024-13576 | Gumlet Video WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | Fix |
| CVE-2024-13575 | Web Stories Enhancer Level Up Your Web Stories WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-18 | Fix |
| CVE-2024-13573 | Zigaform Form Builder Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-13565 | Simple Map No Api WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | |
| CVE-2024-13556 | wecantrack Affiliate Links import/export function PHP object injection | 9.8v3.1 | 0.6% | 2025-02-18 | Fix |
| CVE-2024-13555 | 1 Click WordPress Migration Plugin WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-13540 | WooODT Lite WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2025-02-18 | Fix |
| CVE-2024-13538 | BigBuy Dropshipping Connector for WooCommerce WordPress plugin unauthenticated full path Disclosute | 5.3CNA v3.1 | 0.6% | 2025-02-18 | Fix |
| CVE-2024-13535 | Actionwear products sync WordPress plugin unauthenticated full Patch disclosure | 5.3CNA v3.1 | 0.5% | 2025-02-18 | Fix |
| CVE-2024-13523 | MemorialDay WordPress plugin cross-site request forgery to stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-13522 | magayo Lottery Results WordPress plugin cross-site request forgery to stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-18 | |
| CVE-2024-13501 | WP-FormAssembly WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-18 | Fix |
| CVE-2024-13465 | aBlocks WordPress Gutenberg Blocks plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | Fix |
| CVE-2024-13464 | Library Bookshelves WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | Fix |
| CVE-2024-13438 | SpeedSize Image and Video AI-Optimizer WordPress plugin cross-site request forgery to Clear Cache | 4.3CNA v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-13395 | Threepress WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | Fix |
| CVE-2024-13369 | Tour Master - Tour Booking, Travel, Hotel WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2025-02-18 | Fix |
| CVE-2024-13316 | Scratch and Win WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2025-02-18 | Fix |
| CVE-2024-13315 | Shopwarden WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.2% | 2025-02-18 | Fix |
| CVE-2024-12860 | CarSpot WordPress theme privilege escalation | 9.8CNA v3.1 | 0.5% | 2025-02-18 | Fix |
| CVE-2024-12813 | Open Hours Easy Opening Hours WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | |
| CVE-2024-12525 | Easy MLS Listings Import WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-18 | Fix |
| CVE-2024-12314 | Rapid Cache WordPress plugin unauthenticated cache poisoning | 7.2CNA v3.1 | 0.4% | 2025-02-18 | |
| CVE-2024-11895 | Online Payments Get Paid with PayPal, Square and Stripe WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-18 | Fix |
| CVE-2024-11376 | s2Member WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-02-18 | Fix |
| CVE-2024-4028 | Keycloak-core: Stored XSS in keycloak when creating a items in admin console | 3.8CNA v3.1 | 0.3% | 2025-02-18 | |
| CVE-2024-47935 | TXOne Networks StellarProtect (Legacy Mode) improper integrity check validation | 5.4CNA v4.0 | 0.1% | 2025-02-17 | Fix |
| CVE-2024-25066 | RSA Authentication Manager XML external entity injection | 4.3CNA v3.1 | 0.5% | 2025-02-17 | Fix |
| CVE-2024-13879 | Stream WordPress plugin authenticated (Admin+) server-side request forgery | 5.5CNA v3.1 | 0.3% | 2025-02-17 | Fix |
| CVE-2024-13726 | Themes Coder WordPress plugin unauthenticated SQLi | 8.6CISA ADP v3.1 | 2.0% | 2025-02-17 | NucleiFix |
| CVE-2024-13627 | WP Touch Slider WordPress plugin reflected XSS | 4.7CISA ADP v3.1 | 0.8% | 2025-02-17 | Nuclei |
| CVE-2024-13626 | Vruiz VR-Frases reflected cross-site scripting | 7.1CISA ADP v3.1 | 0.3% | 2025-02-17 | Fix |
| CVE-2024-13625 | Tube Video Ads Lite WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.6% | 2025-02-17 | Nuclei |
| CVE-2024-13608 | Track Logins WordPress plugin Admin+ SQL injection | 4.7CISA ADP v3.1 | 0.4% | 2025-02-17 | |
| CVE-2024-13603 | Wise Forms WordPress plugin unauthenticated stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2025-02-17 | |
| CVE-2024-57971 | eng KNOWAGE resource injection | 9.1CNA v3.1 | 0.7% | 2025-02-16 | Fix |
| CVE-2024-57970 | libarchive buffer over-read | 4.0CNA v3.1 | 0.3% | 2025-02-16 | Fix |
| CVE-2024-44044 | Oshine Modules WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-16 | Fix |
| CVE-2024-13834 | Responsive Plus WordPress plugin server-side request forgery | 5.4CNA v3.1 | 0.3% | 2025-02-15 | Fix |
| CVE-2024-13752 | wedevs WP Project Manager settings notice endpoint missing authorization | 6.5CNA v3.1 | 0.5% | 2025-02-15 | Fix |
| CVE-2024-13563 | Front End Users WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-15 | Fix |
| CVE-2024-13525 | Customer Email Verification for WooCommerce WordPress plugin sensitive information exposure | 6.5CNA v3.1 | 0.4% | 2025-02-15 | Fix |
| CVE-2024-13513 | Oliver POS WordPress plugin information disclosure | 9.8CNA v3.1 | 0.8% | 2025-02-15 | Exploit codeFix |
| CVE-2024-13500 | WP Project Manager WordPress plugin authenticated (Subscriber+) SQL injection via orderby parameter | 6.5v3.1 | 0.4% | 2025-02-15 | Fix |
| CVE-2024-13488 | LTL Freight Quotes Estes Edition WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 1.1% | 2025-02-15 | Exploit codeFix |
| CVE-2024-13439 | Team WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-02-15 | Fix |
| CVE-2024-13306 | WP Google Map WordPress plugin Admin+ stored XSS | 4.3CISA ADP v3.1 | 0.3% | 2025-02-15 | Fix |
| CVE-2024-13208 | WP Google Map WordPress plugin Admin+ stored XSS | 4.3CISA ADP v3.1 | 0.3% | 2025-02-15 | Fix |
| CVE-2024-12562 | s2Member Pro WordPress plugin unauthenticated PHP object injection | 9.8CNA v3.1 | 0.9% | 2025-02-15 | Fix |
| CVE-2024-10581 | DirectoryPress Frontend WordPress plugin cross-site request forgery to Listing Status update | 4.3CNA v3.1 | 0.2% | 2025-02-15 | Fix |
| CVE-2024-10405 | Weak TLS Ciphers on Brocade SANnav port 443 and 18082 | 6.9CNA v4.0 | 0.2% | 2025-02-15 | Fix |
| CVE-2024-5462 | Brocade Fabric OS may capture SNMP Passwords in clear text | 5.3CNA v4.0 | 0.2% | 2025-02-15 | Fix |
| CVE-2024-5461 | Brocade Fabric OS command or parameter injection via unique embedded switch SNMP commands | 8.6CNA v4.0 | 0.5% | 2025-02-15 | Fix |
| CVE-2024-4282 | Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 | 8.2CNA v4.0 | 0.3% | 2025-02-15 | Fix |
| CVE-2024-57969 | MISP incorrect authorization | 4.3CNA v3.1 | 0.3% | 2025-02-14 | Fix |
| CVE-2024-57790 | IXON IXrouter IX2400 hard-coded credentials | 5.4CISA ADP v3.1 | 0.2% | 2025-02-14 | |
| CVE-2024-57778 | Orbe ONetView Roeador Onet-1200 privilege escalation | 8.8CISA ADP v3.1 | 0.5% | 2025-02-14 | Exploit code |
| CVE-2024-57725 | Arcadyan Livebox Fibra PRV3399B_B_LT /firstconnection.cgi endpoint missing authentication | 6.5CISA ADP v3.1 | 6.2% | 2025-02-14 | Exploit code |
| CVE-2024-56973 | Alvaria insecure permissions | 9.8CISA ADP v3.1 | 0.9% | 2025-02-14 | |
| CVE-2024-56477 | IBM Power Hardware Management Console directory traversal | 6.5CNA v3.1 | 0.5% | 2025-02-14 | Fix |
| CVE-2024-56463 | IBM QRadar SIEM cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-02-14 | Fix |
| CVE-2024-56180 | Apache EventMesh: Raft Hessian deserialization vulnerability allowing remote code execution | 9.8CISA ADP v3.1 | 0.8% | 2025-02-14 | Fix |
| CVE-2024-55904 | IBM DevOps Deploy / IBM UrbanCode Deploy command injection | 7.2CNA v3.1 | 0.7% | 2025-02-14 | Fix |
| CVE-2024-52895 | IBM i denial of service | 6.5CNA v3.1 | 0.4% | 2025-02-14 | Fix |
| CVE-2024-52577 | Apache Ignite: Possible RCE when deserializing incoming messages by the server node | 9.5CNA v4.0 | 3.1% | 2025-02-14 | Fix |
| CVE-2024-52500 | Monetag Official WordPress plugin broken access control | 7.2CNA v3.1 | 0.4% | 2025-02-14 | |
| CVE-2024-31144 | Xapi: Metadata injection attack against backup/restore functionality | 3.8CISA ADP v3.1 | 0.2% | 2025-02-14 | Fix |
| CVE-2024-13791 | Bit Assist WordPress plugin path traversal to authenticated arbitrary file read | 4.9CNA v3.1 | 0.7% | 2025-02-14 | Fix |
| CVE-2024-13735 | HurryTimer WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-14 | Fix |
| CVE-2024-13692 | WP Swings Return Refund and Exchange For WooCommerce improper authorization | 5.4CNA v3.1 | 0.3% | 2025-02-14 | Fix |
| CVE-2024-13641 | WP Swings Return Refund and Exchange For WooCommerce attachment directory information disclosure | 7.5v3.1 | 0.5% | 2025-02-14 | Fix |
| CVE-2024-13493 | Sensly Online Presence WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-02-14 | |
| CVE-2024-13152 | SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel | 10.0CNA v3.1 | 0.5% | 2025-02-14 | Fix |
| CVE-2024-12651 | Sensitive data exposure in PTT Inc.'s HGS Mobile App | 8.5CNA v3.1 | 0.4% | 2025-02-14 | Fix |
| CVE-2024-10404 | Broadcom Brocade SANnav CalInvocationHandler logging cleartext storage of sensitive information | 5.5CNA v3.1 | 0.1% | 2025-02-14 | Fix |
| CVE-2024-9601 | Qubely Advanced Gutenberg Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-14 | Fix |
| CVE-2024-8893 | GoodWe Technologies GW1500‑XS hard-coded credentials | 7.3CNA v3.1 | 0.3% | 2025-02-14 | |
| CVE-2024-7052 | Forminator WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-02-14 | Fix |
| CVE-2024-3220 | Python CPython default mimetype known files writeable on Windows | 2.3CNA v4.0 | 0.6% | 2025-02-14 | Fix |
| CVE-2024-2240 | Docker implementation in Brocade SANnav is missing Audit Rules | 8.6CNA v4.0 | 0.5% | 2025-02-14 | Fix |
| CVE-2024-57782 | Docker-proxy denial of service | 6.8CISA ADP v3.1 | 0.2% | 2025-02-13 | |
| CVE-2024-57378 | Adobe Wazuh SIEM missing authorization | 7.3CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-56908 | Perfex CRM upload_sales_file endpoint arbitrary file upload | 6.8CISA ADP v3.1 | 0.6% | 2025-02-13 | |
| CVE-2024-54951 | Monicahq Monica cross-site scripting | 5.4CISA ADP v3.1 | 0.5% | 2025-02-13 | |
| CVE-2024-53311 | arguments parameter in Immunity Inc stack-based buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-53310 | Effectmatrix Total Video Converter Command Line heap-based buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-53309 | Effectmatrix Total Video Converter Command Line -f parameter handling stack-based buffer overflow | 5.5CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-47266 | Synology Active Backup for Business path traversal | 2.7CNA v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2024-47265 | Synology Active Backup for Business external control of a file path | 6.5CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-47264 | Synology Active Backup for Business path traversal | 4.9CNA v3.1 | 0.6% | 2025-02-13 | Fix |
| CVE-2024-46910 | Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user | 7.1CISA ADP v3.1 | 0.6% | 2025-02-13 | Fix |
| CVE-2024-37603 | Mercedes-benz Headunit NTG6 Mercedes-benz User Experience type confusion | 4.6CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-37602 | Mercedes-benz Headunit NTG6 Mercedes-benz User Experience null pointer dereference | 4.6CNA v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-37601 | Mercedes-benz Headunit NTG6 Mercedes-benz User Experience heap-based buffer overflow | 4.6CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-37600 | Mercedes-benz Headunit NTG6 Mercedes-benz User Experience stack-based buffer overflow | 6.8CNA v3.1 | 0.4% | 2025-02-13 | |
| CVE-2024-13867 | Listivo - Classified Ads WordPress theme reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2024-13770 | Puzzles WP Magazine / Review with Store WordPress Theme + RTL unauthenticated PHP object injection | 9.8v3.1 | 0.8% | 2025-02-13 | Fix |
| CVE-2024-13644 | DethemeKit For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-13 | Fix |
| CVE-2024-13639 | Read More and Accordion WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2024-13606 | JS Help Desk WordPress plugin information disclosure | 7.5CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-13346 | Avada WordPress theme unauthenticated arbitrary shortcode execution | 9.8v3.1 | 2.3% | 2025-02-13 | Exploit codeFix |
| CVE-2024-13345 | Avada Builder WordPress plugin unauthenticated arbitrary shortcode execution | 9.8v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2024-13229 | Rank Math SEO WordPress plugin missing authorization authenticated arbitrary Schema deletion | 4.3CNA v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2024-13227 | Rank Math SEO AI SEO Tools to Dominate SEO Rankings WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2024-13182 | WP Directorybox Manager WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.6% | 2025-02-13 | |
| CVE-2024-13125 | Everest Forms WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2024-13121 | Paid Membership WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2024-13120 | ProfilePress WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2024-13119 | ProfilePress WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-12586 | Chalet Montagne Com Tools WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-12054 | ZF Roll Stability Support Plus (RSSPlus) authentication bypass by primary weakness | 5.9CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2024-12013 | Zettler 130.8005 default credentials | 7.6CNA v3.1 | 0.3% | 2025-02-13 | |
| CVE-2024-12012 | Zettler 130.8005 sensitive query strings | 5.7CNA v3.1 | 0.4% | 2025-02-13 | |
| CVE-2024-12011 | Zettler 130.8005 buffer over-read | 7.6CNA v3.1 | 0.4% | 2025-02-13 | |
| CVE-2024-11347 | Lexmark International CX access of resource using incompatible type in Postscript interpreter | 7.3CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-11346 | Lexmark International CX access of resource using incompatible type in Postscript interpreter | 7.3CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-11345 | Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices | 7.3CNA v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2024-11344 | Type confusion vulnerability in the Postscript interpreter in various Lexmark devices | 7.3CNA v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2024-10763 | Campress WordPress theme unauthenticated local file inclusion | 9.8CNA v3.1 | 3.7% | 2025-02-13 | Nuclei |
| CVE-2024-10083 | Schneider Electric Uni-Telway driver improper input validation | 6.8CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2024-8266 | Execution with unnecessary privileges in GitLab | 4.4CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-7102 | Execution with unnecessary privileges in GitLab | 9.6CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-3303 | Improper neutralization of Input Used for LLM Prompting in GitLab | 6.4CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2024-57952 | Linux kernel libfs directory offset allocator vulnerability | 7.1CNA v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-57951 | Linux kernel hrtimer CPU hotplug handling use-after-free | 7.8NVD v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-57605 | Thedaylightstudio Fuel CMS cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-02-12 | |
| CVE-2024-57604 | MaysWind ezBookkeeping has improper privilege management | 9.8CISA ADP v3.1 | 0.7% | 2025-02-12 | |
| CVE-2024-57603 | Missing rate limit in MaysWind ezBookkeeping | 6.3CISA ADP v3.1 | 0.4% | 2025-02-12 | |
| CVE-2024-57602 | Easy!Appointments improper restriction of excessive authentication attempts | 9.8v3.1 | 0.8% | 2025-02-12 | |
| CVE-2024-57601 | Remote code execution in alextselegidis/easyappointments | 6.1CISA ADP v3.1 | 0.5% | 2025-02-12 | |
| CVE-2024-56940 | Learndash denial of service | 7.5v3.1 | 0.6% | 2025-02-12 | |
| CVE-2024-56939 | Learndash cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | |
| CVE-2024-56938 | Learndash cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | |
| CVE-2024-54160 | LF Projects OpenSearch cross-site scripting | 6.4CNA v3.1 | 0.6% | 2025-02-12 | Fix |
| CVE-2024-53880 | NVIDIA Triton Inference Server integer overflow | 4.9CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-51440 | Nothing OS NtBpfService privilege escalation | 7.8CISA ADP v3.1 | 0.2% | 2025-02-12 | |
| CVE-2024-51376 | yeqifu carRental v.1.0 path traversal | 7.5CISA ADP v3.1 | 1.0% | 2025-02-12 | |
| CVE-2024-51123 | Zertificon Z1 SecureMail Gateway compose-pdf.xhtml endpoint information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2025-02-12 | |
| CVE-2024-51122 | Cross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516-debian12 alllows a remote attacker to execute arbitrary code via the ST, L, O, OU, CN parameters. | 6.1CISA ADP v3.1 | 0.5% | 2025-02-12 | |
| CVE-2024-47006 | Intel(R) RealSense D400 Series uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | |
| CVE-2024-46923 | Samsung Exynos 2200 denial of service | 7.5CISA ADP v3.1 | 0.6% | 2025-02-12 | Fix |
| CVE-2024-46922 | Samsung Exynos 1480 null pointer dereference | 7.5CISA ADP v3.1 | 0.6% | 2025-02-12 | Fix |
| CVE-2024-42492 | BIOS and System Firmware Update Package for Intel(R) Server M50FCP family uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-42419 | Intel(R) GPA and Intel(R) GPA Framework software installers incorrect default permissions | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-42410 | Intel(R) Graphics Drivers some improper input validation | 6.8CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-42405 | Intel(R) Quartus(R) Prime Software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-41934 | Intel(R) GPA software some improper access control | 4.1CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-41917 | Intel(R) Battery Life Diagnostic Tool software time-of-check time-of-use race condition | 5.4CNA v4.0 | 0.1% | 2025-02-12 | Fix |
| CVE-2024-41168 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software use-after-free | 7.1CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-41166 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software stack-based buffer overflow | 6.0CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-40887 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software race condition | 6.0CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39813 | EPCT software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39805 | Intel(R) DSA software some insufficient verification of data authenticity | 7.3CNA v4.0 | 0.1% | 2025-02-12 | Fix |
| CVE-2024-39797 | Intel(R) Ethernet Connection I219 Series some drivers improper access control | 5.7CNA v4.0 | 0.2% | 2025-02-12 | |
| CVE-2024-39779 | Intel(R) Ethernet Connection I219 Series some drivers stack-based buffer overflow | 5.7CNA v4.0 | 0.2% | 2025-02-12 | |
| CVE-2024-39606 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software improper input validation | 6.0CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-39372 | Intel(R) XTU software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39365 | Intel(R) oneAPI DPC++/C++ Compiler software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39356 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software null pointer dereference | 7.1CNA v4.0 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-39355 | Intel(R) Processors denial of service | 5.7CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39286 | Intel(R) 800 Series Ethernet Driver information disclosure | 2.0CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39284 | Intel(R) Advisor software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39279 | Intel(R) Processors UEFI firmware in some insufficient access control granularity | 6.8CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-39271 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software improper channel restriction | 2.0CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-38310 | Intel(R) Graphics Driver software installers some improper access control | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-38307 | Intel(R) AMT and Intel(R) Standard Manageability firmware for some improper input validation | 7.1CNA v4.0 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-37355 | Intel(R) Graphics software some improper access control | 8.5CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-37020 | Intel(R) Xeon(R) Processors denial of service | 4.9CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-36293 | Intel(R) Processors with Intel(R) SGX improper access control | 6.8CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-36291 | Intel(R) Chipset Software Installation Utility uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-36285 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software race condition | 5.7CNA v4.0 | 0.1% | 2025-02-12 | Fix |
| CVE-2024-36283 | Intel(R) Thread Director Visualizer software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-36280 | Intel(R) High Level Synthesis Compiler software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-36274 | Intel 800 Series Ethernet Driver out-of-bounds write | 7.1CNA v4.0 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-36262 | Intel(R) System Security Report and System Resources Defense firmware some race condition | 8.6CNA v4.0 | 0.1% | 2025-02-12 | Fix |
| CVE-2024-34521 | Mavenir SCE Application Provisioning Portal path traversal | 3.5CISA ADP v3.1 | 0.6% | 2025-02-12 | |
| CVE-2024-34520 | Mavenir SCE Application Provisioning Portal An authorization bypass | 8.8CISA ADP v3.1 | 0.4% | 2025-02-12 | |
| CVE-2024-32942 | Intel(R) DSA installer incorrect default permissions | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-32941 | Intel(R) MLC software null pointer dereference | 6.9CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-32938 | Intel(R) MPI Library uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-32838 | Apache Fineract: SQL injection vulnerabilities in offices API endpoint | 9.4CNA v4.0 | 1.5% | 2025-02-12 | Fix |
| CVE-2024-31858 | Intel(R) QuickAssist Technology software out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-31157 | Intel(R) Processors UEFI firmware OutOfBandXML module in some improper initialization | 6.8CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-31155 | Intel(R) Processors privilege escalation | 8.7CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-31153 | Intel(R) QuickAssist Technology software improper input validation | 5.1CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-31068 | Intel(R) Processors denial of service | 5.6CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-30211 | Intel(R) ME driver pack installer engines some improper access control | 5.3CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-29223 | Intel(R) QuickAssist Technology software uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-29214 | Intel(R) Processors UEFI firmware CseVariableStorageSmm for some improper input validation | 8.7CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-29172 | Dell BSAFE SSL-J deadlock | 5.9CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-29171 | Dell BSAFE SSL-J improper certificate validation | 5.9CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-28127 | Intel(R) Processors UEFI firmware for some improper input validation | 8.7CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-28047 | Intel(R) Processors UEFI firmware for some improper input validation | 6.8CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-26021 | Intel(R) AMT and Intel(R) Standard Manageability firmware for some improper initialization | 4.6CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-25571 | Intel(R) SPS firmware some improper input validation | 4.6CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-24852 | Intel(R) Ethernet Adapter Complete Driver Pack some uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-24582 | Intel(R) Processors improper input validation | 8.7CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-23563 | HCL Connections Docs is vulnerable to a sensitive information disclosure | 3.9CNA v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-21971 | AMD Ryzen™ 5000 Series Desktop Processors improper input validation | 5.5CNA v3.1 | 0.1% | 2025-02-12 | |
| CVE-2024-21859 | Intel(R) Processors information disclosure | 6.8CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-21830 | Intel(R) VPL software some uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-13821 | WP Booking Calendar WordPress plugin unauthenticated Post-Confirmation Booking manipulation | 5.3CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13814 | Global Gallery - WordPress Responsive Gallery plugin arbitrary shortcode execution | 8.8v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13800 | Popup Plugin For WordPress - ConvertPlus missing authorization authenticated limited options update | 8.1CNA v3.1 | 0.5% | 2025-02-12 | Exploit codeFix |
| CVE-2024-13794 | Hide My WP Ghost Security and Firewall WordPress plugin unauthenticated login page disclosure | 5.3CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13769 | Puzzles WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13749 | StaffList WordPress plugin cross-site request forgery to reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13714 | All-Images.ai IA Image Bank and Custom Image creation WordPress plugin arbitrary file upload | 8.8CNA v3.1 | 1.0% | 2025-02-12 | Fix |
| CVE-2024-13701 | Liveticker (by stklcode) WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-13665 | Admire Extra WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13658 | NGG Smart Image Search WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13656 | Click Mag WordPress theme unauthorized access | 8.1CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13654 | ZoxPress WordPress theme unauthorized access | 8.1CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13653 | ZoxPress WordPress theme unauthorized access | 8.8CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13601 | Majestic Support WordPress plugin insecure direct object reference | 4.3v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13600 | Majestic Support WordPress plugin information disclosure | 7.5CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13554 | The Ultimate WordPress Toolkit WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13541 | aDirectory adqs_delete_listing function missing authorization | 5.4v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13539 | AForms Eats WordPress plugin unauthenticated full path disclosure | 5.3CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13532 | Small Package Quotes Purolator Edition WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13531 | ShipEngine Shipping Quotes WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13528 | Customer Email Verification for WooCommerce WordPress plugin authentication bypass via shortcode | 7.5v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13490 | LTL Freight Quotes XPO Edition WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13480 | LTL Freight Quotes For Customers of FedEx Freight WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-13477 | LTL Freight Quotes Unishippers Edition WordPress plugin unauthenticated SQL injection | 9.8v3.1 | 0.6% | 2025-02-12 | Fix |
| CVE-2024-13475 | Small Package Quotes UPS Edition WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13473 | LTL Freight Quotes - Worldwide Express Edition WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-13459 | FuseDesk WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13456 | Easy Quiz Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-12 | |
| CVE-2024-13437 | Book a Room WordPress plugin cross-site request forgery to settings update | 4.3CNA v3.1 | 0.2% | 2025-02-12 | |
| CVE-2024-13435 | Ebook Downloader WordPress plugin unauthenticated SQL injection | 7.5v3.1 | 0.4% | 2025-02-12 | |
| CVE-2024-13421 | Real Estate 7 WordPress theme unauthenticated privilege escalation to Administrator | 9.8CNA v3.1 | 0.8% | 2025-02-12 | Fix |
| CVE-2024-13374 | WP Table Manager WordPress plugin unauthorized access | 6.5v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2024-13365 | Security and Malware scan by CleanTalk WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 1.6% | 2025-02-12 | Fix |
| CVE-2024-12673 | Lenovo Vantage execution with unnecessary privileges | 8.5CNA v4.0 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-12629 | Prototype pollution in Progress® Telerik® KendoReact | 4.1CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-12386 | WP Abstracts WordPress plugin cross-site request forgery to arbitrary account deletion | 5.4NVD v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-12379 | Allocation of resources without limits or throttling in GitLab | 6.5CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-12315 | Export All Posts, Products, Orders, Refunds and Users WordPress plugin information disclosure | 7.5CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-12296 | Apus Framework WordPress plugin arbitrary options update in import_page_options | 8.8CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-12251 | Progress Software Telerik UI for WinUI improper neutralization special element in hyperlinks | 7.8CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-12213 | WP Job Board Pro WordPress plugin unauthenticated privilege escalation via process_register | 9.8CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-12164 | WPSyncSheets Lite For WPForms WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-11746 | GS Plugins WooCommerce Brands product_brand shortcode stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-11629 | Telerik Document Processing RTF Export of arbitrary File Path | 7.1CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-11628 | Prototype pollution in Progress® Telerik® Kendo UI for Vue | 4.1CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-11343 | Telerik Document Processing path traversal | 8.3CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-10960 | Brizy Page Builder WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.9% | 2025-02-12 | Fix |
| CVE-2024-10322 | Brizy Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-9870 | Unintended proxy or intermediary (confused deputy) in GitLab | 4.3CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2024-6097 | Progress® Telerik® Reporting absolute path traversal | 5.3CNA v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2024-0145 | NVIDIA nvJPEG2000 heap-based buffer overflow | 6.8CNA v3.1 | 0.9% | 2025-02-12 | Fix |
| CVE-2024-0144 | NVIDIA nvJPEG2000 buffer overflow | 6.8CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-0143 | NVIDIA nvJPEG2000 out-of-bounds write | 6.8CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2024-0142 | NVIDIA nvJPEG2000 out-of-bounds write | 6.8CNA v3.1 | 0.6% | 2025-02-12 | Fix |
| CVE-2024-0112 | NVIDIA IGX Orin improper input validation | 7.5CNA v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2024-57777 | Lanproxy Ianproxy v.0.1 and path traversal | 5.1CISA ADP v3.1 | 0.5% | 2025-02-11 | |
| CVE-2024-57241 | DedeCMS open redirect | 6.5CISA ADP v3.1 | 1.2% | 2025-02-11 | NucleiExploit code |
| CVE-2024-55212 | DNNGo xBlog v6.5.0 was discovered to contain a SQL injection vulnerability via the Categorys parameter at /DNNGo_xBlog/Resource_Service.aspx. | 6.5CISA ADP v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-54916 | Telegram for Android SharedConfig checkPasscode method incorrect authorization | 6.8CISA ADP v3.1 | 0.4% | 2025-02-11 | |
| CVE-2024-54772 | MikroTik RouterOS timing side channel | 5.4CISA ADP v3.1 | 0.8% | 2025-02-11 | NucleiExploit code |
| CVE-2024-54090 | Siemens APOGEE PXC Series (BACnet) out-of-bounds read | 6.0CNA v4.0 | 0.4% | 2025-02-11 | |
| CVE-2024-54089 | Siemens APOGEE PXC Series (BACnet) inadequate encryption strength | 8.7CNA v4.0 | 0.2% | 2025-02-11 | |
| CVE-2024-54015 | Siemens SIPROTEC 5 6MD84 (CP300) default credentials | 8.7CNA v4.0 | 0.6% | 2025-02-11 | Fix |
| CVE-2024-53977 | Siemens ModelSim uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-53651 | Siemens SIPROTEC 5 6MD84 (CP300) cleartext storage of sensitive information | 5.1CNA v4.0 | 0.2% | 2025-02-11 | |
| CVE-2024-53648 | Siemens SIPROTEC 5 6MD84 (CP300) active debug code | 7.0CNA v4.0 | 0.3% | 2025-02-11 | Fix |
| CVE-2024-52968 | Fortinet FortiClientMac improper authentication | 5.8CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-52966 | Fortinet FortiAnalyzer information disclosure | 2.2CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-52612 | SolarWinds Platform reflected cross-site scripting | 6.8CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2024-52611 | SolarWinds Platform information disclosure | 3.5CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2024-52606 | SolarWinds Platform server-side request forgery | 3.5CNA v3.1 | 2.5% | 2025-02-11 | Fix |
| CVE-2024-51324 | Baidu Antivirus BdApiUtil driver privilege escalation | 3.8CISA ADP v3.1 | 0.4% | 2025-02-11 | Exploit code |
| CVE-2024-50569 | Fortinet FortiWeb OS command injection | 6.3CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2024-50567 | Fortinet FortiWeb OS command injection | 6.8CNA v3.1 | 2.2% | 2025-02-11 | Fix |
| CVE-2024-47908 | Ivanti Cloud Services Application admin web console OS command injection | 9.1CNA v3.1 | 22.3% | 2025-02-11 | Fix |
| CVE-2024-45718 | SolarWinds Kiwi Syslog NG sensitive data disclosure | 4.6CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-45386 | Siemens SIMATIC PCS neo insufficient session expiration | 8.7CNA v4.0 | 0.6% | 2025-02-11 | Fix |
| CVE-2024-44336 | AnkiDroid app data directory information disclosure | 5.3CISA ADP v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-40591 | Fortinet FortiOS incorrect privilege assignment | 8.0CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2024-40586 | Fortinet FortiClientWindows improper access control | 6.3CNA v3.1 | 0.2% | 2025-02-11 | Exploit codeFix |
| CVE-2024-40584 | Fortinet FortiAnalyzer OS command injection | 6.8CNA v3.1 | 2.0% | 2025-02-11 | Fix |
| CVE-2024-36508 | Fortinet FortiManager path traversal | 5.9CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-35279 | Fortinet FortiOS stack-based buffer overflow | 7.7CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2024-33659 | AMI AptioV BiosGuard buffer overflow and TOCTOU | 5.7CNA v4.0 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-33504 | Fortinet FortiManager hard-coded cryptographic key | 3.9CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2024-33469 | Amaze File Manager DatabaseViewerActivity command injection | 7.9CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2024-32037 | GeoNetwork vulnerable to search end-point information disclosure in response headers | 0.0CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2024-28989 | SolarWinds Web Help Desk Cryptographic Key Management vulnerability | 5.5CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2024-27781 | Fortinet FortiSandbox cross-site scripting | 6.9CNA v3.1 | 28.2% | 2025-02-11 | Fix |
| CVE-2024-27780 | Fortinet FortiSIEM cross-site scripting | 2.2CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2024-23814 | Siemens SIDOOR ATD430W denial of service | 6.9CNA v4.0 | 0.6% | 2025-02-11 | Fix |
| CVE-2024-21966 | AMD Ryzen™ Master Utility DLL hijacking | 7.3CNA v3.1 | 0.2% | 2025-02-11 | |
| CVE-2024-21925 | AMD EPYC™ 7001 Processors improper input validation | 8.2CNA v3.1 | 0.2% | 2025-02-11 | |
| CVE-2024-21924 | AMD EPYC™ 7002 Processors execution with unnecessary privileges | 8.2CNA v3.1 | 0.2% | 2025-02-11 | |
| CVE-2024-13843 | Ivanti Connect Secure cleartext storage of sensitive information | 6.0CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2024-13842 | Ivanti Connect Secure hard-coded cryptographic key | 6.0CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2024-13830 | Ivanti Connect Secure reflected cross-site scripting | 6.1CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2024-13813 | Ivanti Secure Access Client improper permissions | 7.1CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2024-13643 | Zox News WordPress theme missing authorization authenticated arbitrary options modification | 8.8CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2024-13570 | Stray Random Quotes WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.6% | 2025-02-11 | Nuclei |
| CVE-2024-13544 | Zarinpal Paid Downloads WordPress plugin Admin+ arbitrary file upload | 4.8NVD v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-13543 | Zarinpal Paid Downloads WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.6% | 2025-02-11 | Nuclei |
| CVE-2024-13506 | GeoDirectory WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2024-12833 | Paessler PRTG Network Monitor SNMP cross-site scripting authentication bypass | 6.1NVD v3.1 | 0.9% | 2025-02-11 | |
| CVE-2024-12797 | OpenSSL RFC7250 handshakes with unauthenticated servers don't abort as expected | 6.3CISA ADP v3.1 | 2.5% | 2025-02-11 | Fix |
| CVE-2024-12756 | Avaya Spaces HTML injection (HTMLi) | 7.3CNA v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-12755 | Avaya Spaces cross-site scripting | 7.9CNA v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-12599 | HT Mega Absolute Addons For Elementor WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2024-12551 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2025-02-11 | |
| CVE-2024-12550 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds read information disclosure | 7.8v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-12549 | Tungsten Automation Power PDF JP2 File Parsing out-of-bounds read remote code execution | 7.8v3.1 | 0.4% | 2025-02-11 | |
| CVE-2024-12548 | Tungsten Automation Power PDF JP2 File Parsing use-after-free information disclosure | 3.3v3.1 | 0.3% | 2025-02-11 | |
| CVE-2024-12547 | Tungsten Automation Power PDF JPF File Parsing out-of-bounds write remote code execution | 8.8v3.1 | 0.9% | 2025-02-11 | |
| CVE-2024-12366 | PandasAI interactive prompt function remote code execution (RCE) | 9.8CISA ADP v3.1 | 1.2% | 2025-02-11 | |
| CVE-2024-12058 | Ivanti Connect Secure external control of a file path | 6.8CNA v3.1 | 1.1% | 2025-02-11 | Fix |
| CVE-2024-11771 | Ivanti Cloud Services Application path traversal | 5.3CNA v3.1 | 1.2% | 2025-02-11 | Fix |
| CVE-2024-10644 | Ivanti Connect Secure code injection | 9.1CNA v3.1 | 2.8% | 2025-02-11 | Fix |
| CVE-2024-0179 | AMD Ryzen™ 3000 Series Desktop Processors arbitrary code execution | 8.2CNA v3.1 | 0.2% | 2025-02-11 | |
| CVE-2024-57950 | Linux kernel AMD display driver division by zero | 5.5v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2024-57409 | Beian.miit Cool-admin-java Parameter List module stored cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2025-02-10 | |
| CVE-2024-57408 | Beian.miit Cool-admin-java component /comm/upload arbitrary file upload | 7.2CISA ADP v3.1 | 0.9% | 2025-02-10 | |
| CVE-2024-57407 | component /userPicture of Timo v2.0.3 An arbitrary file upload | 7.3CISA ADP v3.1 | 0.4% | 2025-02-10 | |
| CVE-2024-57178 | Stock-Forecaster portofolio endpoint SQL injection | 5.9CISA ADP v3.1 | 0.2% | 2025-02-10 | |
| CVE-2024-57177 | CouchAuth has a server-side template injection vulnerability in its email functionality | 7.3CISA ADP v3.1 | 0.3% | 2025-02-10 | |
| CVE-2024-54954 | Zhyd OneBlog server-side template injection | 8.0CISA ADP v3.1 | 0.4% | 2025-02-10 | |
| CVE-2024-54658 | Apple Safari denial of service | 6.5v3.1 | 0.5% | 2025-02-10 | Fix |
| CVE-2024-48170 | PHPGurukul Small CRM cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-10 | |
| CVE-2024-46437 | Tenda W18E information disclosure | 6.5CISA ADP v3.1 | 1.2% | 2025-02-10 | |
| CVE-2024-46436 | Tenda W18E hard-coded credentials | 8.3CISA ADP v3.1 | 0.5% | 2025-02-10 | |
| CVE-2024-46435 | Tenda W18E stack-based buffer overflow | 8.0CISA ADP v3.1 | 0.8% | 2025-02-10 | |
| CVE-2024-46434 | Tenda W18E improper authentication | 8.8CISA ADP v3.1 | 0.9% | 2025-02-10 | |
| CVE-2024-46433 | Tenda W18E default credentials | 8.8CISA ADP v3.1 | 0.5% | 2025-02-10 | |
| CVE-2024-46432 | Tenda W18E improper access control | 8.8CISA ADP v3.1 | 0.6% | 2025-02-10 | |
| CVE-2024-46431 | Tenda W18E buffer overflow | 8.0CISA ADP v3.1 | 0.5% | 2025-02-10 | |
| CVE-2024-46430 | Tenda W18E authentication bypass | 6.5CISA ADP v3.1 | 0.8% | 2025-02-10 | |
| CVE-2024-46429 | Tenda W18E hard-coded credentials | 8.8CISA ADP v3.1 | 0.6% | 2025-02-10 | |
| CVE-2024-42513 | OPC Foundation Ua .net Standard Stack authentication bypass | 5.3CISA ADP v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2024-42512 | OPC Foundation Ua .net Standard Stack timing side channel | 8.6CISA ADP v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2024-27859 | Apple macOS code injection | 8.8v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2024-13059 | Path traversal in mintplex-labs/anything-llm | 7.2CNA v3.0 | 24.1% | 2025-02-10 | Fix |
| CVE-2024-13011 | WP Foodbakery WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2025-02-10 | Fix |
| CVE-2024-13010 | WP Foodbakery WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-02-10 | |
| CVE-2024-12243 | GnuTLS certificate decoder denial of service | 5.3CNA v3.1 | 1.3% | 2025-02-10 | Fix |
| CVE-2024-12133 | libtasn1 DER decoder denial of service | 5.3CNA v3.1 | 1.1% | 2025-02-10 | Fix |
| CVE-2024-11831 | Red Hat Advanced Cluster Security cross-site scripting (XSS) in serialize-javascript | 5.4CNA v3.1 | 1.1% | 2025-02-10 | Fix |
| CVE-2024-11621 | Devolutions Remote Desktop Manager improper certificate validation | 8.8CISA ADP v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2024-10649 | Unauthenticated file upload in wandb/openui | 6.1CNA v3.0 | 0.3% | 2025-02-10 | |
| CVE-2024-10334 | ABB System 800xA camera passwords stored in clear text | 7.0CNA v4.0 | 0.1% | 2025-02-10 | |
| CVE-2024-8685 | KUNBUS Revolution Pi path traversal | 4.3CNA v3.1 | 0.5% | 2025-02-10 | Fix |
| CVE-2024-8684 | OS command injection vulnerability in Revolution Pi | 8.3CNA v3.1 | 1.2% | 2025-02-10 | Fix |
| CVE-2024-8550 | Local file inclusion (LFI) in modelscope/agentscope | 7.5CNA v3.0 | 0.5% | 2025-02-10 | |
| CVE-2024-57949 | Linux kernel irqchip/gic-v3-its improper locking | 5.5v3.1 | 0.2% | 2025-02-09 | Fix |
| CVE-2024-13440 | Super Store Finder WordPress plugin unauthenticated SQL injection to stored cross-site scripting | 7.5NVD v3.1 | 0.4% | 2025-02-09 | Fix |
| CVE-2024-54176 | IBM UrbanCode Deploy missing authentication | 4.3CNA v3.1 | 0.3% | 2025-02-08 | Fix |
| CVE-2024-13850 | Simple add pages or posts WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2025-02-08 | Fix |
| CVE-2024-57707 | dataease code injection | 9.8CISA ADP v3.1 | 0.8% | 2025-02-07 | |
| CVE-2024-57606 | SQL injection in JeecgBoot | 7.5CISA ADP v3.1 | 0.6% | 2025-02-07 | Fix |
| CVE-2024-57357 | TP-Link Tl-wpa8630 OS command injection | 8.0CISA ADP v3.1 | 5.5% | 2025-02-07 | |
| CVE-2024-57279 | LDAP User Manager setup page reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2025-02-07 | |
| CVE-2024-57278 | QingScan sqlmap index page reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.2% | 2025-02-07 | |
| CVE-2024-57249 | Gleamtech Filevista authentication bypass | 6.5CISA ADP v3.1 | 0.5% | 2025-02-07 | |
| CVE-2024-57248 | Gleamtech Filevista file upload path traversal | 6.3CISA ADP v3.1 | 3.2% | 2025-02-07 | |
| CVE-2024-55630 | DOM Clobbering leads to temporary DOS in the note viewer in Joplin | 3.3CNA v3.1 | 0.3% | 2025-02-07 | Fix |
| CVE-2024-55272 | Brainasoft Braina chat window function information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2025-02-07 | |
| CVE-2024-55215 | Jrohy trojan incorrect default permissions | 9.8CISA ADP v3.1 | 1.4% | 2025-02-07 | Exploit code |
| CVE-2024-55214 | DHTMLX FileExplorer local file inclusion | 6.5CISA ADP v3.1 | 0.5% | 2025-02-07 | |
| CVE-2024-55213 | DHTMLX FileExplorer path traversal | 6.5CISA ADP v3.1 | 0.8% | 2025-02-07 | |
| CVE-2024-52884 | AudioCodes Mediant Session Border Controller weak cryptographic algorithm | 7.5CISA ADP v3.1 | 0.2% | 2025-02-07 | |
| CVE-2024-52883 | AudioCodes One Voice Operations Center path traversal | 7.5CISA ADP v3.1 | 0.7% | 2025-02-07 | |
| CVE-2024-52882 | AudioCodes One Voice Operations Center cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-02-07 | |
| CVE-2024-52881 | AudioCodes One Voice Operations Center hard-coded cryptographic key | 7.5CISA ADP v3.1 | 0.4% | 2025-02-07 | |
| CVE-2024-48091 | Tally Solutions Tally Prime Edit Log TextShaping.dll loading DLL hijacking | 7.8CISA ADP v3.1 | 0.2% | 2025-02-07 | |
| CVE-2024-35106 | NEXTU FLETA AX1500 WiFi6 formIpQoS endpoint buffer overflow | 4.6CISA ADP v3.1 | 0.5% | 2025-02-07 | |
| CVE-2024-13841 | Builder Shortcode Extras WordPress Shortcodes Collection to Save You Time plugin post disclosure | 4.3CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2024-13492 | Guten Free Options WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-07 | Nuclei |
| CVE-2024-13352 | Legull WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.6% | 2025-02-07 | Nuclei |
| CVE-2024-10383 | Improper neutralization of input during web page generation in GitLab VSCode Fork | 8.7CNA v3.1 | 0.3% | 2025-02-07 | Fix |
| CVE-2024-9664 | WP All Import Pro WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.7% | 2025-02-07 | Fix |
| CVE-2024-9661 | WP All Import Pro WordPress plugin cross-site request forgery to Imported content deletion | 4.3CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2024-7425 | WP All Export Pro WordPress plugin authenticated (ShopManager+) Arbtirary options update | 7.2v3.1 | 0.4% | 2025-02-07 | Fix |
| CVE-2024-7419 | WP All Export Pro WordPress plugin unauthenticated remote code execution via Custom export fields | 8.8v3.1 | 0.6% | 2025-02-07 | Fix |
| CVE-2024-57962 | Huawei HarmonyOS vulnerability of incomplete verification information in the VPN service module | 6.1CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57961 | Huawei HarmonyOS out-of-bounds write vulnerability in the emcom module | 6.8CNA v3.1 | 0.3% | 2025-02-06 | Fix |
| CVE-2024-57960 | Huawei HarmonyOS input verification vulnerability in the ExternalStorageProvider module | 7.7CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57959 | Huawei HarmonyOS use-after-free (UAF) vulnerability in the display module | 6.1CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57958 | Huawei HarmonyOS out-of-bounds array read vulnerability in the FFRT module | 5.7CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57957 | Huawei HarmonyOS vulnerability of improper log information control in the UI framework module | 6.6CNA v3.1 | 0.3% | 2025-02-06 | Fix |
| CVE-2024-57956 | Huawei HarmonyOS out-of-bounds read vulnerability in the interpreter string module | 2.8CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57955 | Huawei HarmonyOS arbitrary write vulnerability in the Gallery module | 6.1CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57954 | Huawei HarmonyOS permission verification vulnerability in the media library module | 6.2CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57673 | projectfloodlight Floodlight denial of service | 5.5CISA ADP v3.1 | 0.2% | 2025-02-06 | |
| CVE-2024-57672 | projectfloodlight Floodlight denial of service | 5.5CISA ADP v3.1 | 0.1% | 2025-02-06 | |
| CVE-2024-57668 | Fabian Shopping Portal unrestricted file upload | 8.8v3.1 | 0.7% | 2025-02-06 | |
| CVE-2024-57610 | Sylius missing brute-force protection | 7.5CISA ADP v3.1 | 1.2% | 2025-02-06 | Exploit code |
| CVE-2024-57609 | Kanaries Pygwalker login redirection function code injection | 8.6CISA ADP v3.1 | 0.7% | 2025-02-06 | |
| CVE-2024-57599 | Douco DouPHP cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2025-02-06 | |
| CVE-2024-57523 | oretnom23 Packers And Movers Management System cross-site request forgery | 4.5CISA ADP v3.1 | 0.5% | 2025-02-06 | Exploit code |
| CVE-2024-57430 | PHP Jabbers Cinema Booking System pjActionGetUser function of PHPJabbers SQL injection | 9.8CISA ADP v3.1 | 0.9% | 2025-02-06 | Exploit code |
| CVE-2024-57429 | PHP Jabbers Cinema Booking System pjActionUpdate function of PHPJabbers cross-site request forgery | 5.4CISA ADP v3.1 | 0.3% | 2025-02-06 | Exploit code |
| CVE-2024-57428 | PHP Jabbers Cinema Booking System stored cross-site scripting | 9.3CISA ADP v3.1 | 0.8% | 2025-02-06 | |
| CVE-2024-57427 | PHP Jabbers Cinema Booking System cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-02-06 | Exploit code |
| CVE-2024-57426 | NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries. | 7.3CISA ADP v3.1 | 0.4% | 2025-02-06 | |
| CVE-2024-57392 | Proftpd commit buffer overflow | 7.5CISA ADP v3.1 | 1.2% | 2025-02-06 | Fix |
| CVE-2024-56889 | CodeAstro Complaint Management System improper access control | 7.5CISA ADP v3.1 | 0.7% | 2025-02-06 | |
| CVE-2024-56467 | IBM EntireX information disclosure | 3.3CNA v3.1 | 0.1% | 2025-02-06 | Fix |
| CVE-2024-55241 | deep-diver LLM-As-Chatbot modelsbyom.py code injection | 8.8CISA ADP v3.1 | 0.9% | 2025-02-06 | |
| CVE-2024-54909 | GoldPanKit eva-server resource download endpoint path traversal | 8.1CISA ADP v3.1 | 0.5% | 2025-02-06 | |
| CVE-2024-54171 | IBM EntireX XML external entity injection | 7.1CNA v3.1 | 0.4% | 2025-02-06 | Fix |
| CVE-2024-53586 | WebFileSys relPath file path handling path traversal | 5.3CISA ADP v3.1 | 1.9% | 2025-02-06 | Exploit code |
| CVE-2024-52892 | IBM Jazz for Service Management cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-02-06 | Fix |
| CVE-2024-51547 | ABB ASPECT-Enterprise credentials disclosure keys | 9.3CNA v4.0 | 0.6% | 2025-02-06 | Fix |
| CVE-2024-51450 | IBM Security Verify Directory command execution | 9.1CNA v3.1 | 1.1% | 2025-02-06 | Fix |
| CVE-2024-49814 | IBM Security Verify Access Appliance privilege escalation | 7.8CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-49800 | IBM ApplinX information disclosure | 4.3CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-49798 | IBM ApplinX information disclosure | 4.3CNA v3.1 | 0.4% | 2025-02-06 | Fix |
| CVE-2024-49797 | IBM ApplinX information disclosure | 5.9CNA v3.1 | 0.3% | 2025-02-06 | Fix |
| CVE-2024-49796 | IBM ApplinX clickjacking | 5.4CNA v3.1 | 0.4% | 2025-02-06 | Fix |
| CVE-2024-49795 | IBM ApplinX cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2025-02-06 | Fix |
| CVE-2024-49794 | IBM ApplinX cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2025-02-06 | Fix |
| CVE-2024-49793 | IBM ApplinX cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-49792 | IBM ApplinX cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-49791 | IBM ApplinX cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-48589 | Gilnei Moraes phpABook v.0.9 cross-site scripting | 6.3CISA ADP v3.1 | 0.6% | 2025-02-06 | |
| CVE-2024-47258 | 2N Access Commander improper certificate validation | 8.1CNA v3.1 | 0.1% | 2025-02-06 | |
| CVE-2024-47256 | 2N Access Commander hard-coded cryptographic key | 6.0CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-45626 | Apache James: Denial of service through JMAP HTML to text conversion | 6.5CNA v3.1 | 0.8% | 2025-02-06 | Fix |
| CVE-2024-43779 | Clearml Enterprise Server Vault API functionality information disclosure | 6.5NVD v3.1 | 0.8% | 2025-02-06 | |
| CVE-2024-39272 | Clearml Enterprise Server dataset upload functionality cross-site scripting | 8.2NVD v3.1 | 0.6% | 2025-02-06 | |
| CVE-2024-39033 | Newgensoft OmniDocs getuserproperty function insecure direct object reference | 7.5CISA ADP v3.1 | 0.4% | 2025-02-06 | |
| CVE-2024-37358 | Apache James: Denial of service through the use of IMAP literals | 8.6CNA v3.1 | 0.9% | 2025-02-06 | Fix |
| CVE-2024-36558 | Forever KidsWatch Call Me KW-50 cleartext transmission of sensitive information | 7.5CISA ADP v3.1 | 0.2% | 2025-02-06 | |
| CVE-2024-36557 | Forever KidsWatch Call Me device ID authentication bypass by spoofing | 6.6CISA ADP v3.1 | 0.2% | 2025-02-06 | |
| CVE-2024-36556 | Forever KidsWatch Call Me hard-coded credentials | 9.1CISA ADP v3.1 | 0.4% | 2025-02-06 | |
| CVE-2024-36555 | Forever KidsWatch Call Me SMS-configuration command missing authentication | 9.8CISA ADP v3.1 | 0.4% | 2025-02-06 | |
| CVE-2024-36554 | Forever KidsWatch Call Me SMS handling information disclosure | 9.8CISA ADP v3.1 | 0.4% | 2025-02-06 | |
| CVE-2024-36553 | Forever KidsWatch Call Me KW-50 man-in-the-middle | 8.1CISA ADP v3.1 | 0.3% | 2025-02-06 | |
| CVE-2024-25883 | RSD mstatus register incorrect calculation | 5.3CISA ADP v3.1 | 0.3% | 2025-02-06 | |
| CVE-2024-24911 | Out-of-bounds read in the CPCA process on Check Point Management Server | 5.3CNA v3.1 | 0.4% | 2025-02-06 | Fix |
| CVE-2024-13614 | Kaspersky Anti-Virus SDK integer overflow | 5.3CNA v3.1 | 0.1% | 2025-02-06 | Fix |
| CVE-2024-13487 | VillaTheme CURCY get_products_price function code injection | 7.3CNA v3.1 | 0.7% | 2025-02-06 | Fix |
| CVE-2024-13417 | 2N OS uncaught exception | 4.6CNA v3.1 | 0.2% | 2025-02-06 | |
| CVE-2024-13416 | 2N OS sensitive information in log files | 4.3CNA v3.1 | 0.4% | 2025-02-06 | |
| CVE-2024-12602 | Huawei HarmonyOS identity verification vulnerability in the ParamWatcher module | 6.2CNA v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2024-57699 | Netplex Json-smart uncontrolled recursion | 7.5CISA ADP v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-57598 | Axiosys Bento4 divide by zero | 6.5CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-57520 | Sangoma asterisk insecure permissions | 9.8CISA ADP v3.1 | 1.0% | 2025-02-05 | Fix |
| CVE-2024-57086 | Node-opcua-alarm-condition prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-57085 | @stryker-mutator/util vulnerable to prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-57084 | function lib.parse of dot-properties v1.0.1 prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57082 | @rpldy/uploader prototype pollution | 6.5CISA ADP v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2024-57081 | lib.fromQuery function of underscore-contrib v0.3.0 A prototype pollution | 7.5CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-57080 | Vxe-table prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57079 | @zag-js/core prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-57078 | lib.merge function of cli-util v1.1.27 A prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57077 | Utils-extend prototype pollution | 9.1CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-57076 | lib.post function of ajax-request v1.2.3 prototype pollution | 7.5CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-57075 | Eazy-logger prototype pollution | 7.5CISA ADP v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-57074 | lib.merge function of xe-utils v3.5.31 A prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57072 | Module-from-string prototype pollution | 7.5CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-57071 | lib.combine function of php-parser v3.2.1 prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57069 | lib function of expand-object v0.4.2 prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57068 | @tanstack/form-core prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-57067 | lib.parse function of dot-qs v0.2.0 prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57066 | @ndhoule/defaults prototype pollution | 7.5CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-57065 | lib.createPath function of utile v0.3.0 prototype pollution | 7.5CISA ADP v3.1 | 0.6% | 2025-02-05 | |
| CVE-2024-57064 | lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 prototype pollution | 7.5CISA ADP v3.1 | 0.4% | 2025-02-05 | |
| CVE-2024-57063 | lib function of php-date-formatter v1.3.6 prototype pollution | 7.5CISA ADP v3.1 | 0.5% | 2025-02-05 | |
| CVE-2024-56473 | IBM Aspera Shares Client-IP header handling log injection | 5.3CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2024-56472 | IBM Aspera Shares cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-56471 | IBM Aspera Shares server-side request forgery | 5.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-56470 | IBM Aspera Shares server-side request forgery | 5.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-56135 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-56134 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-56133 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-56132 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 6.3% | 2025-02-05 | Fix |
| CVE-2024-56131 | Progress LoadMaster OS command injection | 8.4CNA v3.1 | 6.1% | 2025-02-05 | Fix |
| CVE-2024-54853 | Skybox Change Manager stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-02-05 | |
| CVE-2024-53966 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-53965 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.5% | 2025-02-05 | Fix |
| CVE-2024-53964 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-53963 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.5% | 2025-02-05 | Fix |
| CVE-2024-53962 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-52365 | IBM Cloud Pak for Business Automation cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-52364 | IBM Cloud Pak for Business Automation cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-49352 | IBM Cognos Anaytics XML external entity injection | 7.1CNA v3.1 | 0.5% | 2025-02-05 | Fix |
| CVE-2024-49348 | IBM Cloud Pak for Business Automation incorrect privilege assignment | 4.3CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2024-48394 | NDD Print driver race condition | 7.8CISA ADP v3.1 | 0.1% | 2025-02-05 | |
| CVE-2024-42207 | HCL iAutomate is affected by a session fixation | 5.5CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2024-39564 | Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-38318 | IBM Aspera Shares HTML injection | 4.8CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2024-38317 | IBM Aspera Shares cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-38316 | IBM Aspera Shares denial of service | 4.3CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-13829 | Tripetto attachments.php file information disclosure | 5.3CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-9631 | Inefficient algorithmic complexity in GitLab | 7.5CNA v3.1 | 0.7% | 2025-02-05 | Fix |
| CVE-2024-9097 | ManageEngine Endpoint Central IDOR | 3.5CNA v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-7596 | Generic UDP Encapsulation do not validate or verify the source of a network packet | 6.5v3.1 | 0.9% | 2025-02-05 | |
| CVE-2024-7595 | GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet | 6.5NVD v3.1 | 1.6% | 2025-02-05 | |
| CVE-2024-6356 | Incorrect user management in GitLab | 4.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2024-5528 | Incomplete Comparison with Missing Factors in GitLab | 3.5CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2024-3976 | Missing authorization in GitLab | 6.5CNA v3.1 | 0.6% | 2025-02-05 | Fix |
| CVE-2024-2878 | Allocation of resources without limits or throttling in GitLab | 7.5CNA v3.1 | 19.7% | 2025-02-05 | Fix |
| CVE-2024-1539 | Missing authorization in GitLab | 4.3CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2024-56328 | HTMLi(XSS without CSP) via Onebox urls in Discourse | 6.5CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-56197 | Users can see other user's tagged PMs in Discourse | 2.2CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-55948 | Anonymous cache poisoning via XHR requests in Discourse | 8.2CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-53994 | Potential bypass of chat permissions in Discourse | 4.3CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-53851 | Partial denial of service via inline oneboxes in Discourse | 4.3CNA v3.1 | 0.5% | 2025-02-04 | Fix |
| CVE-2024-53266 | Cross-site scripting (XSS) via topic titles when CSP disabled in Discourse | 4.3CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-48445 | Compop Online Mall improper authentication | 9.8CISA ADP v3.1 | 2.0% | 2025-02-04 | Exploit code |
| CVE-2024-48019 | Apache Doris: Allows admin users to read arbitrary files through the REST API | 5.4CISA ADP v3.1 | 1.0% | 2025-02-04 | Fix |
| CVE-2024-45659 | IBM Security Verify Access information disclosure | 5.3CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-45658 | IBM Security Verify Access information disclosure | 2.7CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-45657 | IBM Security Verify Access incorrect privilege assignment | 5.0CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2024-43187 | IBM Security Verify Access information disclosure | 5.9CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2024-40891 | Zyxel DSL CPE OS command injection | 8.8CNA v3.1 | 21.5% | 2025-02-04 | KEVEmerging ThreatsExploit codeKCV |
| CVE-2024-40890 | Zyxel DSL CPE OS command injection | 8.8CNA v3.1 | 20.7% | 2025-02-04 | KEVEmerging Threats |
| CVE-2024-40700 | IBM Security Verify Access cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-35138 | IBM Security Verify Access cross-site request forgery | 6.5CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2024-27137 | Apache Cassandra: Unrestricted deserialization of JMX authentication credentials | 5.3CISA ADP v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-23690 | EOL Netgear FVS336v3 Telnet Configuration Backup command injection | 7.2CNA v3.1 | 1.1% | 2025-02-04 | |
| CVE-2024-13733 | SKT Blocks Gutenberg based Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-13723 | Checkmk NagVis remote code execution | 7.2CISA ADP v3.1 | 1.3% | 2025-02-04 | Fix |
| CVE-2024-13722 | Checkmk NagVis reflected cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2025-02-04 | Fix |
| CVE-2024-13699 | Qi Addons For Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-13607 | JS Help Desk The Ultimate Help Desk and Support WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-13529 | SocialV WordPress theme unauthorized access | 6.5CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-13514 | B Slider- Gutenberg Slider Block for WP WordPress plugin information disclosure | 4.3CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-13510 | ShopSite WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2024-13403 | WPForms Lite WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-13356 | DSGVO All in one for WP WordPress plugin cross-site request forgery to account deletion | 6.5CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2024-13332 | TransFinanz WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-02-04 | |
| CVE-2024-13331 | WP Dream Carousel WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-13330 | Justrows Free WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-13329 | Solidres WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.3% | 2025-02-04 | |
| CVE-2024-13328 | Giga Messenger Bots WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-13327 | Musicbox WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-13326 | iBuildApp WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-13325 | Glossy WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-13115 | WP Projects Portfolio with Client Testimonials WordPress plugin stored XSS via CSRF | 6.1CISA ADP v3.1 | 0.2% | 2025-02-04 | |
| CVE-2024-13114 | WP Projects Portfolio with Client Testimonials WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-02-04 | Nuclei |
| CVE-2024-12597 | HT Mega WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-12046 | Medical Addon for Elementor WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2024-11623 | Stored XSS in authentik | 4.8v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2024-11468 | Omnissa Horizon Client for MacOS incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2025-02-04 | |
| CVE-2024-11467 | Omnissa Horizon Client for MacOS improper privilege management | 7.8CNA v3.1 | 0.2% | 2025-02-04 | Exploit code |
| CVE-2024-10239 | MBD-X12DPG-OA6 firmware image verification stack-based buffer overflow | 7.2CNA v3.1 | 0.5% | 2025-02-04 | |
| CVE-2024-10238 | MBD-X12DPG-OA6 firmware image verification stack-based buffer overflow | 7.2CNA v3.1 | 0.5% | 2025-02-04 | |
| CVE-2024-10237 | SMCI MBD-X12DPG-OA6 SMC BMC Firmware Image Authentication Design issue | 7.2CNA v3.1 | 0.2% | 2025-02-04 | |
| CVE-2024-9644 | Four-Faith F3x36 bapply.cgi Auth Bypass | 9.8CNA v3.1 | 0.7% | 2025-02-04 | |
| CVE-2024-9643 | Four-Faith F3x36 Hidden Debug Credentials | 9.8CNA v3.1 | 3.0% | 2025-02-04 | Nuclei |
| CVE-2024-8125 | A remote code vulnerability has been discovered in OpenText™ Content Management | 5.4CNA v4.0 | 0.3% | 2025-02-04 | |
| CVE-2024-57968 | Advantive VeraCore unrestricted file upload | 8.8NVD v3.1 | 32.3% | 2025-02-03 | KEVFix |
| CVE-2024-57967 | CyberArk Privileged Access Manager incorrect privilege assignment | 4.2CNA v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2024-57966 | KDE ark absolute path traversal | 5.0CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-57669 | Zrlog backup-sql-file.jar v.3.0.31 path traversal | 7.5CISA ADP v3.1 | 1.0% | 2025-02-03 | |
| CVE-2024-57522 | oretnom23 Packers And Movers Management System cross-site scripting | 6.4CISA ADP v3.1 | 1.0% | 2025-02-03 | Exploit code |
| CVE-2024-57498 | ForestBlog sayski cross-site scripting | 4.8CISA ADP v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-57452 | 1000mz ChestnutCMS files accessible to external parties | 7.5CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-57451 | 1000mz ChestnutCMS path traversal | 7.5CISA ADP v3.1 | 0.9% | 2025-02-03 | |
| CVE-2024-57450 | 1000mz ChestnutCMS unrestricted file upload | 9.8CISA ADP v3.1 | 0.6% | 2025-02-03 | |
| CVE-2024-57238 | Prolink 4G LTE Mobile Wi-Fi DL-7203E proc_get endpoint SQL injection | 7.3CISA ADP v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-57237 | Prolink 4G LTE Mobile Wi-Fi DL-7203E proc_get endpoint cross-site scripting | 6.3CISA ADP v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-57175 | PHPGurukul Online Birth Certificate System cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-57099 | ClassCMS code injection | 9.8CISA ADP v3.1 | 0.7% | 2025-02-03 | |
| CVE-2024-57098 | Deep-project Moss SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-57097 | ClassCMS cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2025-02-03 | |
| CVE-2024-57004 | Roundcube Webmail cross-site scripting | 6.1CISA ADP v3.1 | 39.7% | 2025-02-03 | Fix |
| CVE-2024-56946 | Technitium DNS Server DNS-over-QUIC denial of service | 5.3CNA v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-56921 | Open5GS AMF authentication handling denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-02-03 | |
| CVE-2024-56903 | Geovision GV-ASWeb account management cross-site request forgery | 8.1CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-56902 | Geovision GV-ASManager web application information disclosure | 7.5CISA ADP v3.1 | 23.4% | 2025-02-03 | Emerging ThreatsExploit code |
| CVE-2024-56901 | Geovision GV-ASWeb application cross-site request forgery | 8.8CISA ADP v3.1 | 1.8% | 2025-02-03 | Exploit code |
| CVE-2024-56898 | Geovision GV-ASWeb missing authorization | 8.8CISA ADP v3.1 | 2.6% | 2025-02-03 | Exploit code |
| CVE-2024-56161 | AMD EPYC™ 7001 Series improper signature verification | 7.2CNA v3.1 | 0.5% | 2025-02-03 | Fix |
| CVE-2024-55456 | Sammycage Lunasvg improper isolation | 6.5CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-54840 | CyberArk Privileged Access Manager use of a less trusted source | 6.1v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2024-53943 | NRadio N8-180 SSID name field vulnerability | 6.1CISA ADP v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-53942 | NRadio N8-180 radio endpoint OS command injection | 4.8CISA ADP v3.1 | 15.0% | 2025-02-03 | Emerging Threats |
| CVE-2024-50656 | Angeljudesuarez Placement Management System cross-site scripting | 6.1v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-50500 | Phlox Core Elements WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2024-49843 | Qualcomm Snapdragon improper validation of array index in Graphics_Linux | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-49840 | Qualcomm Snapdragon use of out-of-range pointer offset in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-49839 | Qualcomm Snapdragon buffer over-read in WLAN Host Cmn | 8.2CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-49838 | Qualcomm Snapdragon buffer over-read in WLAN host | 8.2CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-49837 | Qualcomm Snapdragon improper validation of array index in Automotive OS Platform | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-49834 | Qualcomm Snapdragon improper validation of array index in Camera | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-49833 | Qualcomm Snapdragon improper validation of array index in Camera | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-49832 | Qualcomm Snapdragon improper validation of array index in Camera | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-47770 | wazuh ability to view agent list with no privilege access in wazuh-dashboard | 4.6CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-45584 | Qualcomm Snapdragon untrusted pointer dereference in Automotive Android OS | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-45582 | Qualcomm Snapdragon improper validation of array index in Camera driver | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-45573 | Qualcomm Snapdragon use of out-of-range pointer offset in Display | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-45571 | Qualcomm Snapdragon use-after-free in WLAN Host Communication | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-45569 | Qualcomm Snapdragon improper validation of array index in WLAN Host Communication | 9.8CNA v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2024-45561 | Qualcomm Snapdragon use-after-free in Windows WLAN host | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-45560 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-44449 | Quorum onQ OS v.6.0.0.5.2064 cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2025-02-03 | |
| CVE-2024-43333 | Admin and Site Enhancements (ASE) Pro WordPress plugin privilege escalation | 7.5CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2024-38420 | Qualcomm Snapdragon improper input validation in Hypervisor | 8.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38418 | Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera Linux | 7.8CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38417 | Qualcomm Snapdragon buffer over-read in Automotive Multimedia | 6.1CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38416 | Qualcomm Snapdragon buffer over-read in Audio | 6.1CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38414 | Qualcomm Snapdragon buffer over-read in Computer Vision | 6.1CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38413 | Qualcomm Snapdragon improper input validation in Computer Vision | 6.6CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38412 | Qualcomm Snapdragon use-after-free in Computer Vision | 6.6CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38411 | Qualcomm Snapdragon use-after-free in Computer Vision | 6.6CNA v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-38404 | Qualcomm Snapdragon buffer over-read in Multi Mode Call Processor | 7.5CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-36437 | Enflick TextNow DialerActivity vulnerability | 6.5CISA ADP v3.1 | 0.3% | 2025-02-03 | Exploit code |
| CVE-2024-35177 | wazuh improper access control in wazuh-agent | 7.8CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-34897 | Nedis SmartLife Android app information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-34896 | Nedis SmartLife Video Doorbell peer-to-peer video connection vulnerability | 7.5CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2024-20147 | MediaTek chipsets reachable assertion in Bluetooth | 5.3CISA ADP v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2024-20142 | MediaTek chipsets out-of-bounds write in DA | 6.6v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-20141 | MediaTek chipsets write-what-where condition in DA | 6.6v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2024-13347 | Essential WP Real Estate WordPress plugin reflected XSS | 6.8CISA ADP v3.1 | 0.6% | 2025-02-03 | |
| CVE-2024-12859 | BoomBox Theme Extensions WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2024-12511 | Xerox Versalink B400 SMB/FTP Address Book Scan Pass-back attack | 7.6CNA v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2024-12510 | Xerox Versalink B400 LDAP Authentication Sever Pass-back attack | 6.7CNA v3.1 | 1.0% | 2025-02-03 | Fix |
| CVE-2024-11134 | Eventer WordPress plugin missing authorization to authenticated (Subscriber+) Bookings export | 6.5v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-11133 | Eventer WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-11132 | Eventer WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2024-10395 | zephyrproject-rtos Zephyr net: Lib: Http_server: Buffer under-read | 8.6CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2024-6790 | Mali GPU Kernel Driver can cause the whole system to become unresponsive | 6.1v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2024-0131 | NVIDIA GPU Display Driver, vGPU software buffer access with incorrect length | 4.4CNA v3.1 | 0.2% | 2025-02-02 | Fix |
| CVE-2024-53296 | Dell PowerProtect DD stack-based buffer overflow | 2.7CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-53295 | Dell PowerProtect DD insufficient access control granularity | 7.8CNA v3.1 | 0.1% | 2025-02-01 | Fix |
| CVE-2024-51534 | Dell PowerProtect DD path traversal | 7.1CNA v3.1 | 0.2% | 2025-02-01 | Fix |
| CVE-2024-13775 | WooCommerce Support Ticket System WordPress plugin unauthorized access | 5.4CNA v3.1 | 0.2% | 2025-02-01 | Fix |
| CVE-2024-13651 | RapidLoad WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-02-01 | Fix |
| CVE-2024-13612 | Better Messages WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-01 | Fix |
| CVE-2024-13547 | aThemes Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-01 | Fix |
| CVE-2024-13429 | WP Job Portal WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-13428 | WP Job Portal WordPress plugin insecure direct object reference | 5.3CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-13425 | WP Job Portal WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-13372 | WP Job Portal WordPress plugin insecure direct object reference | 5.3CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-13371 | WP Job Portal WordPress plugin missing authorization to unauthenticated arbitrary email Sending | 5.3CNA v3.1 | 0.5% | 2025-02-01 | Fix |
| CVE-2024-13343 | WooCommerce Customers Manager WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-13341 | MultiLoca - WooCommerce Multi Locations Inventory Management WordPress plugin SQL injection | 6.5v3.1 | 0.5% | 2025-02-01 | Fix |
| CVE-2024-13099 | Widget4call WordPress plugin reflected XSS | 5.4CISA ADP v3.1 | 0.7% | 2025-02-01 | Nuclei |
| CVE-2024-13098 | WP Email Newsletter WordPress plugin reflected XSS | 5.4CISA ADP v3.1 | 0.7% | 2025-02-01 | Nuclei |
| CVE-2024-13097 | WP Finance WordPress plugin reflected XSS | 5.4CISA ADP v3.1 | 0.7% | 2025-02-01 | Nuclei |
| CVE-2024-13096 | WP Finance WordPress plugin stored XSS via CSRF | 4.6CISA ADP v3.1 | 0.2% | 2025-02-01 | |
| CVE-2024-12825 | Custom Related Posts WordPress plugin unauthorized access | 5.4CNA v3.1 | 0.3% | 2025-02-01 | Fix |
| CVE-2024-12768 | Responsive iframe WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.3% | 2025-02-01 | |
| CVE-2024-12620 | AnimateGL Animations for WordPress WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2025-02-01 | |
| CVE-2024-12184 | WordPress Contact Forms by Cimatti WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-12171 | ELEX WordPress HelpDesk and Customer Ticketing System WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.5% | 2025-02-01 | Fix |
| CVE-2024-12041 | wpWax Directorist users REST endpoint information disclosure | 5.3v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-11829 | The Plus Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-01 | Fix |
| CVE-2024-11780 | Site Search 360 WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-02-01 | Fix |
| CVE-2024-57948 | Linux kernel mac802154 interface removal null pointer dereference | 5.5NVD v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-57587 | Easyvirt CO2SCOPE Multiple SQL injection | 9.1CISA ADP v3.1 | 0.6% | 2025-01-31 | |
| CVE-2024-57435 | macrozheng Mall-tiny null pointer dereference | 6.5CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-57434 | macrozheng Mall-tiny incorrect authorization | 8.8CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-57433 | macrozheng Mall-tiny improper access control | 7.5CISA ADP v3.1 | 0.4% | 2025-01-31 | |
| CVE-2024-57432 | macrozheng Mall-tiny improper authentication | 7.5CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-55062 | Easyvirt CO2SCOPE code injection | 9.8CISA ADP v3.1 | 1.1% | 2025-01-31 | |
| CVE-2024-53584 | openpanel OS command injection | 9.8CISA ADP v3.1 | 4.2% | 2025-01-31 | Exploit code |
| CVE-2024-53582 | openpanel path traversal | 7.5CISA ADP v3.1 | 3.3% | 2025-01-31 | Exploit code |
| CVE-2024-53537 | openpanel path traversal | 9.1CISA ADP v3.1 | 2.4% | 2025-01-31 | Exploit code |
| CVE-2024-53357 | Easyvirt CO2SCOPE Multiple SQL injection | 7.5CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-53356 | Easyvirt CO2SCOPE hard-coded credentials | 9.8CISA ADP v3.1 | 0.7% | 2025-01-31 | |
| CVE-2024-53355 | Easyvirt CO2SCOPE improper preservation of permissions | 8.8CISA ADP v3.1 | 0.6% | 2025-01-31 | |
| CVE-2024-53354 | Easyvirt CO2SCOPE Multiple SQL injection | 6.5CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-53320 | Qualisys C++ SDK GetCurrentFrame, SaveCapture and LoadProject functions vulnerability | 9.8CISA ADP v3.1 | 0.4% | 2025-01-31 | |
| CVE-2024-53319 | Qualisys C++ SDK XML text escaping heap-based buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-01-31 | |
| CVE-2024-53007 | Bentley ProjectWise Integration Server incorrect use of privileged APIs | 6.4CNA v3.1 | 0.1% | 2025-01-31 | Fix |
| CVE-2024-52875 | GFI Kerio Control HTTP response splitting | 8.8CNA v3.1 | 29.3% | 2025-01-31 | Reported exploitedNucleiEmerging Threats |
| CVE-2024-49807 | IBM Sterling B2B Integrator cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-49349 | IBM Financial Transaction Manager cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-49339 | IBM Financial Transaction Manager cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-47900 | GPU DDK Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes | 7.8CISA ADP v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-47899 | GPU DDK PVRSRVDeviceServicesOpen use-after-free condition | 7.8CISA ADP v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-47898 | GPU DDK PVRSRVDeviceSyncOpen use-after-free condition | 7.8CISA ADP v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-47891 | Imagination Technologies Graphics DDK TLServerCloseStreamKM kernel function double free | 7.8CISA ADP v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-47857 | SSH Communication Security PrivX SSH proxy authentication vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-47116 | IBM Sterling B2B Integrator cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-47103 | IBM Sterling B2B Integrator cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-46974 | GPU DDK Arbitrary write of read-only dmabuf | 7.8CISA ADP v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-45650 | IBM Security Verify Directory denial of service | 7.5CNA v3.1 | 0.4% | 2025-01-31 | Fix |
| CVE-2024-45089 | IBM Sterling B2B Integrator information disclosure | 4.3CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-44055 | Oshine Modules WordPress plugin unauthenticated server side request forgery (SSRF) | 5.4CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-42671 | slabiak Appointment Scheduler v.1.0.5 host header injection | 6.1CISA ADP v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-40696 | IBM Sterling B2B Integrator cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-24731 | Silicon Labs Gecko OS http_download stack-based buffer overflow | 8.8v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23973 | Silicon Labs Gecko OS HTTP GET Request Handling stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23971 | ChargePoint Home Flex OCPP bswitch command injection | 8.8CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23970 | ChargePoint Home Flex improper certificate validation | 6.5CNA v3.1 | 0.2% | 2025-01-31 | |
| CVE-2024-23969 | ChargePoint Home Flex wlanchnllst out-of-bounds write | 8.8CNA v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23968 | ChargePoint Home Flex SrvrToSmSetAutoChnlListMsg stack-based buffer overflow | 8.8CNA v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23963 | Alpine Halo9 stack-based buffer overflow | 8.0CNA v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23962 | Alpine Halo9 missing authentication | 5.3CNA v3.1 | 0.7% | 2025-01-31 | |
| CVE-2024-23937 | Silicon Labs Gecko OS Debug interface format string | 4.3CNA v3.1 | 0.4% | 2025-01-31 | |
| CVE-2024-23930 | Pioneer DMH-WT7600NEX Media service improper handling of exceptional conditions | 6.5CISA ADP v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23929 | Pioneer DMH-WT7600NEX Telematics directory traversal | 7.3CNA v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23928 | Pioneer DMH-WT7600NEX Telematics improper certificate validation | 6.5CNA v3.1 | 0.2% | 2025-01-31 | |
| CVE-2024-23921 | ChargePoint Home Flex command injection | 8.8CNA v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-23920 | ChargePoint Home Flex improper access control | 8.8CNA v3.1 | 0.5% | 2025-01-31 | |
| CVE-2024-13767 | Live2DWebCanvas WordPress plugin authenticated (Subscriber+) arbitrary file deletion | 8.1CNA v3.1 | 1.0% | 2025-01-31 | Fix |
| CVE-2024-13717 | Contact Form and Calls To Action by vcita WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-13662 | eHive Objects Image Grid WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-13623 | Order Export for WooCommerce WordPress plugin unauthenticated sensitive information exposure | 5.9CNA v3.1 | 0.5% | 2025-01-31 | Fix |
| CVE-2024-13566 | WP DataTable WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-31 | Fix |
| CVE-2024-13530 | Custom Login Page Styler WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-13504 | Shared Files WordPress plugin stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2025-01-31 | Fix |
| CVE-2024-13472 | WC Product Table WooCommerce Product Table Lite shortcode execution code injection | 7.3CNA v3.1 | 0.6% | 2025-01-31 | Fix |
| CVE-2024-13463 | SeatReg WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-13424 | Ni Sales Commission For WooCommerce WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.2% | 2025-01-31 | |
| CVE-2024-13415 | Food Menu WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-13399 | Gosign Posts Slider Block WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-13397 | WPRadio WordPress Radio Streaming plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-31 | Fix |
| CVE-2024-13396 | Frictionless WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-31 | |
| CVE-2024-13226 | A5 Custom Login Page WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13225 | ECT Home Page Products WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13224 | SlideDeck 1 Lite Content Slider WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13223 | Tabulate WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-13222 | User Messages WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13221 | Fantastic Elasticsearch WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13220 | Google Map Professional WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13219 | Policy Genius WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13218 | Fast Tube WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2025-01-31 | |
| CVE-2024-13216 | HT Event WordPress Event Manager Plugin for Elementor sensitive information exposure | 4.3CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-13157 | MP3 Audio Player WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-31 | Fix |
| CVE-2024-13112 | WP MediaTagger WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-31 | Nuclei |
| CVE-2024-13101 | WP MediaTagger WordPress plugin Contributor+ stored XSS | 5.4CISA ADP v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-13100 | ashamil OPSI Israel Domestic Shipments reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-12872 | Zalomení WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-12772 | Ninja Tables WordPress plugin Admin+ stored XSS | 5.4NVD v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-12415 | AI Infographic Maker WordPress plugin unauthenticated arbitrary shortcode execution | 6.5CNA v3.1 | 0.5% | 2025-01-31 | Fix |
| CVE-2024-12275 | CanvasFlow WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-12267 | Drag and Drop Multiple File Upload Contact Form 7 WordPress plugin limited arbitrary file deletion | 9.1v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-12037 | Post Form WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-31 | Fix |
| CVE-2024-11886 | Contact Form and Calls To Action by vcita WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-31 | |
| CVE-2024-11741 | Grafana Alerting VictorOps integration could be exposed to users with Viewer permission | 4.3CNA v3.1 | 0.4% | 2025-01-31 | Fix |
| CVE-2024-10867 | Borderless WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-1211 | Cross-site request forgery (CSRF) in GitLab | 6.4CNA v3.1 | 0.3% | 2025-01-31 | Fix |
| CVE-2024-55417 | DevDojo Voyager arbitrary file write | 4.3CISA ADP v3.1 | 14.1% | 2025-01-30 | Nuclei |
| CVE-2024-55416 | DevDojo Voyager vulnerable to reflected cross-site scripting | 3.5CISA ADP v3.1 | 20.3% | 2025-01-30 | Nuclei |
| CVE-2024-55415 | DevDojo Voyager vulnerable to path traversal | 5.7CISA ADP v3.1 | 15.6% | 2025-01-30 | Nuclei |
| CVE-2024-53615 | Files.photo.gallery command injection | 6.5CISA ADP v3.1 | 1.3% | 2025-01-30 | Exploit code |
| CVE-2024-44142 | Apple GarageBand arbitrary code execution | 7.8v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13758 | CP Contact Form with PayPal WordPress plugin cross-site request forgery | 6.5v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13742 | iControlWP Multiple WordPress Site Manager plugin unauthenticated PHP object injection | 9.8CNA v3.1 | 0.9% | 2025-01-30 | Fix |
| CVE-2024-13732 | Responsive Blocks WordPress Gutenberg Blocks plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-30 | Fix |
| CVE-2024-13720 | WP Image Uploader WordPress plugin missing authorization authenticated arbitrary file deletion | 9.1v3.1 | 0.5% | 2025-01-30 | Fix |
| CVE-2024-13715 | zStore Manager Basic WordPress plugin missing authorization authenticated Cache Clearing | 4.3CNA v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-13707 | WP Image Uploader WordPress plugin cross-site request forgery to arbitrary file deletion | 8.1v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-13706 | WP Image Uploader WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-30 | |
| CVE-2024-13705 | StageShow WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13700 | Embed Swagger UI WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | |
| CVE-2024-13694 | WooCommerce Wishlist WordPress plugin insecure direct object reference | 7.5CNA v3.1 | 0.6% | 2025-01-30 | Fix |
| CVE-2024-13671 | Music Sheet Viewer WordPress plugin unauthenticated arbitrary file read | 7.5v3.1 | 0.5% | 2025-01-30 | Fix |
| CVE-2024-13670 | Music Sheet Viewer WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-13664 | WP Post List Table WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-13661 | Table Editor WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13652 | ECPay Ecommerce for WooCommerce WordPress plugin missing authorization authenticated Log deletion | 4.3CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13646 | Single-user-chat WordPress plugin authenticated (Subscriber+) limited options update | 8.1v3.1 | 0.4% | 2025-01-30 | |
| CVE-2024-13642 | Stratum Elementor Widgets WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-13596 | WordPress Survey and Poll Quiz, Survey and Poll Plugin for WordPress SQL injection | 6.5v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13549 | All Bootstrap Blocks WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-13512 | Wonder FontAwesome WordPress plugin cross-site request forgery to stored cross-site scripting | 5.4v3.1 | 0.1% | 2025-01-30 | |
| CVE-2024-13470 | Ninja Forms WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13466 | Automatically Hierarchic Categories in Menu WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13460 | WE Testimonial Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | |
| CVE-2024-13457 | Event Tickets WordPress plugin insecure direct object reference to sensitive information exposure | 5.3CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13453 | smub Contact Form and SMTP Plugin for PirateForms shortcode execution code injection | 7.3CNA v3.1 | 0.5% | 2025-01-30 | Fix |
| CVE-2024-13400 | Kona Gallery Block WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-30 | |
| CVE-2024-13380 | Alex Reservations: Smart Restaurant Booking WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-13349 | Stockdio Historical Chart WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12921 | EthereumICO WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-12861 | W2S WordPress plugin arbitrary file read | 6.5CNA v3.1 | 0.4% | 2025-01-30 | Fix |
| CVE-2024-12822 | Media Manager for UserPro WordPress plugin unauthorized access | 9.8CNA v3.1 | 0.6% | 2025-01-30 | |
| CVE-2024-12821 | Media Manager for UserPro WordPress plugin unauthorized access | 6.5NVD v3.1 | 0.4% | 2025-01-30 | |
| CVE-2024-12709 | Bulk Me Now WordPress plugin Message deletion via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2025-01-30 | |
| CVE-2024-12708 | Bulk Me Now WordPress plugin stored XSS via shortcode | 7.1CISA ADP v3.1 | 0.3% | 2025-01-30 | |
| CVE-2024-12638 | Bulk Me Now WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.5% | 2025-01-30 | Nuclei |
| CVE-2024-12524 | Clinked Client Portal WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12451 | HTML5 chat WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12444 | WP Dispensary WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-30 | |
| CVE-2024-12409 | Simple:Press Forum WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12400 | Tourmaster WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12320 | Team Rosters WordPress plugin reflected cross-site scripting via tab | 6.1CNA v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12299 | System Dashboard WordPress plugin reflected cross-site scripting via Filename parameter | 6.1CNA v3.1 | 0.4% | 2025-01-30 | Fix |
| CVE-2024-12269 | Safe Ai Malware Protection for WP WordPress plugin unauthorized access | 7.5CNA v3.1 | 0.6% | 2025-01-30 | Fix |
| CVE-2024-12248 | Out-of-bounds write vulnerability in Contec Health CMS8000 Patient Monitor | 9.3CNA v4.0 | 1.3% | 2025-01-30 | |
| CVE-2024-12177 | Ai Image Alt Text Generator for WP WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-30 | Fix |
| CVE-2024-12163 | GoodLayers Core WordPress plugin Subscriber+ stored XSS via SVG upload | 6.5CISA ADP v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-12129 | Royal Core WordPress plugin authenticated (Subscriber+) arbitrary options update | 8.8CNA v3.1 | 0.4% | 2025-01-30 | |
| CVE-2024-12102 | Typer Core WordPress plugin authenticated (Contributor+) post disclosure | 4.3v3.1 | 0.3% | 2025-01-30 | |
| CVE-2024-11611 | AutomationDirect C-More EA9 EAP9 File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-11610 | AutomationDirect C-More EA9 EAP9 File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-11609 | AutomationDirect C-More EA9 EAP9 File Parsing stack-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-11600 | Borderless WordPress plugin remote code execution | 7.2CNA v3.1 | 1.3% | 2025-01-30 | Fix |
| CVE-2024-11583 | visualmodo Borderless icon font deletion function missing authorization | 4.3CNA v3.1 | 0.4% | 2025-01-30 | Fix |
| CVE-2024-10847 | Storely WordPress theme authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-30 | |
| CVE-2024-10604 | Google Identifiable Header Values in Fuchsia leading to Tracking of the User | 6.9CNA v4.0 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-10603 | Google gVisor predictable identifiers | 6.3CNA v4.0 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-10591 | MWB HubSpot for WooCommerce WordPress plugin unauthorized access | 8.8CNA v3.1 | 0.5% | 2025-01-30 | Fix |
| CVE-2024-10309 | Tracking Code Manager for WordPress Contributor+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-10026 | Google Improved Seeding and Hashing in gVisor | 6.3CNA v4.0 | 0.2% | 2025-01-30 | Fix |
| CVE-2024-8494 | Elementor Website Builder Pro WordPress plugin information disclosure | 6.5v3.1 | 0.3% | 2025-01-30 | Fix |
| CVE-2024-2658 | Local privilege escalation in FlexNet Publisher | 8.5CNA v4.0 | 0.8% | 2025-01-30 | Fix |
| CVE-2024-57965 | axios origin validation error | 9.8v3.1 | 0.4% | 2025-01-29 | Fix |
| CVE-2024-57665 | heyewei JFinalCMS SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-01-29 | |
| CVE-2024-57513 | Bento4 AP4_TfraAtom function vulnerability | 6.5CISA ADP v3.1 | 0.3% | 2025-01-29 | |
| CVE-2024-57510 | Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 buffer overflow | 7.8CISA ADP v3.1 | 0.2% | 2025-01-29 | |
| CVE-2024-57509 | Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 buffer overflow | 7.8CISA ADP v3.1 | 0.2% | 2025-01-29 | |
| CVE-2024-57439 | RuoYi vulnerable to denial of service by attackers with admin privileges | 4.9CISA ADP v3.1 | 0.6% | 2025-01-29 | |
| CVE-2024-57438 | RuoYi has insecure permissions | 5.4CISA ADP v3.1 | 0.3% | 2025-01-29 | |
| CVE-2024-57437 | RuoYi online list endpoint SQL injection | 6.5CISA ADP v3.1 | 0.5% | 2025-01-29 | |
| CVE-2024-57436 | RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring | 7.2CISA ADP v3.1 | 0.6% | 2025-01-29 | |
| CVE-2024-57395 | Safety production process management system insufficiently protected credentials | 9.8CISA ADP v3.1 | 0.7% | 2025-01-29 | |
| CVE-2024-54852 | Sismics Teedy LDAP injection | 9.8CISA ADP v3.1 | 0.8% | 2025-01-29 | |
| CVE-2024-54851 | Sismics Teedy cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2025-01-29 | |
| CVE-2024-54462 | Unsanitized Filenames in Flutter package image_picker_android allow File Overwrites | 2.1CNA v4.0 | 0.2% | 2025-01-29 | Fix |
| CVE-2024-54461 | Unsanitized Filenames in Flutter package file_selector_android allow File Overwrites | 2.1CNA v4.0 | 0.2% | 2025-01-29 | Fix |
| CVE-2024-51182 | Celk Saude Celk Sistemas HTML injection | 6.1CISA ADP v3.1 | 0.3% | 2025-01-29 | |
| CVE-2024-48852 | ABB FLXEON log files information disclosure | 6.9CNA v4.0 | 2.5% | 2025-01-29 | Exploit codeFix |
| CVE-2024-48849 | ABB FLXEON missing WebSocket origin validation | 8.8CNA v4.0 | 0.9% | 2025-01-29 | Exploit codeFix |
| CVE-2024-48761 | Celk Saude Celk Sistemas reflected cross-site scripting | 8.8CISA ADP v3.1 | 0.6% | 2025-01-29 | |
| CVE-2024-41140 | ManageEngine Applications Manager improper authorization | 8.1CNA v3.1 | 0.9% | 2025-01-29 | Fix |
| CVE-2024-23733 | Software AG webMethods Integration Server admin login page vulnerability | 7.5CISA ADP v3.1 | 2.4% | 2025-01-29 | Exploit code |
| CVE-2024-13696 | Flexible Wishlist for WooCommerce WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2025-01-29 | Fix |
| CVE-2024-13561 | Target Video Easy Publish WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-29 | Fix |
| CVE-2024-12749 | Competition Form WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.6% | 2025-01-29 | Nuclei |
| CVE-2024-12705 | ISC BIND 9 DNS-over-HTTPS implementation suffers from multiple issues under heavy query load | 7.5CNA v3.1 | 18.4% | 2025-01-29 | Fix |
| CVE-2024-11187 | ISC BIND 9 many records in the additional section cause CPU exhaustion | 7.5CNA v3.1 | 16.7% | 2025-01-29 | Fix |
| CVE-2024-10001 | Code injection vulnerability in GitHub Enterprise Server allows arbitrary code execution | 7.1CNA v4.0 | 0.4% | 2025-01-29 | Fix |
| CVE-2024-7695 | Moxa PT-7728 Series out-of-bounds write | 8.7CNA v4.0 | 0.7% | 2025-01-29 | Fix |
| CVE-2024-57519 | Open5GS denial of service | 7.5CISA ADP v3.1 | 0.7% | 2025-01-28 | |
| CVE-2024-57514 | TP-Link Archer A20 directory listing cross-site scripting | 4.8CISA ADP v3.1 | 0.9% | 2025-01-28 | Nuclei |
| CVE-2024-57376 | D-Link DSR-150 buffer overflow | 8.8CISA ADP v3.1 | 3.6% | 2025-01-28 | Exploit code |
| CVE-2024-56529 | Mailcow web panel session fixation | 7.1CISA ADP v3.1 | 0.4% | 2025-01-28 | |
| CVE-2024-55968 | DTEX Systems DEC-M Forwarder XPC helper service privilege escalation | 8.8CISA ADP v3.1 | 1.0% | 2025-01-28 | Exploit code |
| CVE-2024-53881 | NVIDIA vGPU Software incomplete cleanup | 5.5CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-53869 | NVIDIA GPU Display Driver, vGPU software incomplete cleanup | 5.5CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-48310 | AutoLib Software Systems OPAC information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2025-01-28 | |
| CVE-2024-45341 | Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 | 6.1CISA ADP v3.1 | 0.5% | 2025-01-28 | Fix |
| CVE-2024-45340 | GOAUTH credential leak in cmd/go | 8.8CISA ADP v3.1 | 0.7% | 2025-01-28 | Fix |
| CVE-2024-45339 | Vulnerability when creating log files in github.com/golang/glog | 7.1CISA ADP v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-45336 | Sensitive headers incorrectly sent after cross-domain redirect in net/http | 6.1CISA ADP v3.1 | 0.7% | 2025-01-28 | Fix |
| CVE-2024-40677 | Google Android AdvancedPowerUsageDetail.java privilege escalation | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-40676 | Google Android AccountManagerService.java privilege escalation | 7.7CISA ADP v3.1 | 0.2% | 2025-01-28 | Exploit codeFix |
| CVE-2024-40675 | Google Android Intent.java infinite loop | 7.5CISA ADP v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-40674 | Google Android WifiConfigurationUtil.java denial of service | 5.3CISA ADP v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-40673 | Google Android ZipFile.java remote code execution | 6.5CISA ADP v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-40672 | Google Android ChooserActivity.java privilege escalation | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-40670 | Google Android TBD use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-40669 | Google Android TBD use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-40651 | Google Android TBD use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-40649 | Google Android TBD use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-34748 | Google Android devicemem_server.c use-after-free | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-34733 | Google Android devicemem_server.c arbitrary code execution | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-34732 | Google Android rgxmem.c arbitrary code execution | 8.4CISA ADP v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-29869 | Apache Hive: Credentials file created with non restrictive permissions | 5.5CISA ADP v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-28786 | IBM QRadar SIEM information disclosure | 6.5CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-27263 | IBM Sterling B2B Integrator information disclosure | 5.3CNA v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-23953 | Apache Hive: Timing Attack against Signature in LLAP util | 6.5CISA ADP v3.1 | 1.3% | 2025-01-28 | Fix |
| CVE-2024-22315 | IBM Fusion improper communication restriction | 4.0CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-13527 | Philantro Donations and Donor Management WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-13521 | MailUp Auto Subscription WordPress plugin cross-site request forgery to stored cross-site scripting | 5.4v3.1 | 0.1% | 2025-01-28 | Fix |
| CVE-2024-13509 | WS Form LITE and PRO WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2025-01-28 | Fix |
| CVE-2024-13484 | Red Hat OpenShift GitOps openshift-gitops-operator-container: Namespace isolation break | 8.2CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-13448 | ThemeREX Addons trx_addons_uploads_save_data function unrestricted file upload | 9.8CNA v3.1 | 0.9% | 2025-01-28 | Fix |
| CVE-2024-12807 | Social Share Buttons for WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-01-28 | |
| CVE-2024-12723 | Infility Global for WordPress reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-01-28 | |
| CVE-2024-12649 | Canon Satera MF656Cdw buffer overflow | 9.8CNA v3.1 | 1.2% | 2025-01-28 | Fix |
| CVE-2024-12648 | Canon Satera MF656Cdw buffer overflow | 9.8CNA v3.1 | 1.2% | 2025-01-28 | Fix |
| CVE-2024-12647 | Canon Satera MF656Cdw buffer overflow | 9.8CNA v3.1 | 1.2% | 2025-01-28 | Fix |
| CVE-2024-11956 | Pimcore customer-data-framework list SQL injection | 7.2v3.1 | 0.9% | 2025-01-28 | Exploit codeFix |
| CVE-2024-11954 | Pimcore Search Document cross-site scripting | 4.8v3.1 | 1.1% | 2025-01-28 | Exploit codeFix |
| CVE-2024-11135 | Eventer WordPress plugin unauthenticated SQL injection via eventer_get_attendees | 7.5v3.1 | 0.5% | 2025-01-28 | Fix |
| CVE-2024-8401 | Schneider Electric EcoStruxure Power Monitoring Expert (PME) 2021 cross-site scripting | 5.4CNA v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-7881 | An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced. | 5.1CISA ADP v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-6351 | silabs.com SiSDK malformed packet leads to denial of service in NWK/APS layer | 4.3CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-0150 | NVIDIA GPU Display Driver, vGPU software out-of-bounds write | 7.1CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-0149 | NVIDIA GPU Display Driver, vGPU software out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-0147 | NVIDIA GPU Display Driver, vGPU software use-after-free | 5.5CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-0146 | NVIDIA vGPU Software buffer overflow | 7.8CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-0140 | NVIDIA RAPIDS cuDF and cuML deserialization of untrusted data | 6.8CNA v3.1 | 0.2% | 2025-01-28 | Fix |
| CVE-2024-0137 | NVIDIA Container Toolkit improper isolation | 5.5CNA v3.1 | 0.3% | 2025-01-28 | Fix |
| CVE-2024-0136 | NVIDIA Container Toolkit improper isolation | 7.6CNA v3.1 | 0.7% | 2025-01-28 | Fix |
| CVE-2024-0135 | NVIDIA Container Toolkit improper isolation | 7.6CNA v3.1 | 1.1% | 2025-01-28 | Fix |
| CVE-2024-57595 | DIR-825 apc_client_pin.cgi OS command injection | 9.8CISA ADP v3.1 | 1.2% | 2025-01-27 | |
| CVE-2024-57590 | TRENDnet TEW-632BRP command injection | 9.8CISA ADP v3.1 | 1.1% | 2025-01-27 | |
| CVE-2024-57549 | CMSimple path traversal | 7.5CISA ADP v3.1 | 0.7% | 2025-01-27 | |
| CVE-2024-57548 | CMSimple incorrect default permissions | 9.1CISA ADP v3.1 | 0.5% | 2025-01-27 | |
| CVE-2024-57547 | CMSimple insecure permissions | 7.5CISA ADP v3.1 | 0.6% | 2025-01-27 | |
| CVE-2024-57546 | CMSimple insecure storage of sensitive information | 7.5CISA ADP v3.1 | 0.6% | 2025-01-27 | |
| CVE-2024-57373 | LifestyleStore v1.0 cross-site request forgery | 8.1CISA ADP v3.1 | 0.4% | 2025-01-27 | Exploit code |
| CVE-2024-57276 | Electronic Arts Dragon Age Origins DAUpdaterSVC service privilege escalation | 7.3CISA ADP v3.1 | 0.2% | 2025-01-27 | |
| CVE-2024-57272 | SecuSTATION Camera cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-01-27 | |
| CVE-2024-57052 | YouDianCMS session fixation | 9.8CISA ADP v3.1 | 0.5% | 2025-01-27 | |
| CVE-2024-56972 | Midea Home open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56971 | Zhiyuan Yuedu Literature Information Technology Shuqi Novel open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56969 | Pixocial Technology BeautyPlus open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56968 | Intellirocks Govee Home open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56967 | Cloud Whale Interactive Technology PolyBuzz open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56966 | Xuan Ting Entertainment Information and Technology Qidian Reader open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56965 | Shizhi Information Technology Shihuo open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56964 | Che Hao Duo Used Automobile Agency Guazi Used Car open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56963 | Sogou Input open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56962 | Tencent WeSing open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56960 | Tianjin Xiaowu Information Technology BeiKe Holdings open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56959 | Mashang Consumer Finance Anyihua open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56957 | Kingsoft WPS Office open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56955 | Tencent QQMail open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56954 | Baidu Haokan Video open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56953 | Baidu Input Method open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56952 | Baidu Lite open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56951 | Hangzhou Bobo Technology UU Game Booster open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56950 | KuGou Concept open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56949 | Guangzhou Polar Future Culture Technology University Search open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56948 | KuGou Music open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56947 | Xiamen Meitu Technology BeautyCam open redirect | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-56316 | AXESS ACS TR069 API denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-01-27 | |
| CVE-2024-56178 | Couchbase Server improper preservation of permissions | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | Fix |
| CVE-2024-55931 | Xerox Workplace Suite token stored in session storage | 6.5CNA v3.1 | 0.4% | 2025-01-27 | Fix |
| CVE-2024-55228 | Dolibarr cross-site scripting | 9.0v3.1 | 0.6% | 2025-01-27 | Fix |
| CVE-2024-55227 | Dolibarr cross-site scripting | 9.0v3.1 | 0.6% | 2025-01-27 | Fix |
| CVE-2024-54728 | BYD QIN PLUS DM-i Dilink OS logcat system logs vulnerability | 6.5CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-54557 | Apple macOS improper preservation of permissions | 7.5v3.1 | 0.5% | 2025-01-27 | Fix |
| CVE-2024-54550 | Apple macOS information disclosure | 4.0CISA ADP v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54549 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54547 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54543 | Apple Safari out-of-bounds write | 8.8v3.1 | 0.8% | 2025-01-27 | Fix |
| CVE-2024-54542 | Apple Safari missing authorization | 9.1CISA ADP v3.1 | 0.7% | 2025-01-27 | Fix |
| CVE-2024-54541 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54539 | Apple macOS lock screen vulnerability | 5.5CISA ADP v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54537 | Apple macOS app sandbox vulnerability | 8.2v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54536 | Apple macOS NVRAM variables vulnerability | 5.5v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54530 | Apple macOS incorrect authorization | 9.1CISA ADP v3.1 | 0.6% | 2025-01-27 | Fix |
| CVE-2024-54523 | Apple macOS out-of-bounds write | 6.3NVD v3.1 | 0.4% | 2025-01-27 | Fix |
| CVE-2024-54522 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54520 | Apple macOS path traversal | 5.5v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54519 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54518 | Apple macOS out-of-bounds read | 5.3v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54517 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54516 | Apple macOS improper preservation of permissions | 3.3v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54512 | Apple watchOS incorrect authorization | 9.1v3.1 | 0.4% | 2025-01-27 | Fix |
| CVE-2024-54509 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2025-01-27 | Fix |
| CVE-2024-54507 | Apple macOS out-of-bounds read | 5.5NVD v3.1 | 0.9% | 2025-01-27 | Exploit codeFix |
| CVE-2024-54499 | Apple macOS use-after-free | 8.8v3.1 | 0.6% | 2025-01-27 | Fix |
| CVE-2024-54497 | Apple iPadOS resource exhaustion | 6.5v3.1 | 1.0% | 2025-01-27 | Fix |
| CVE-2024-54488 | Apple iPadOS incorrect authorization | 5.3v3.1 | 0.5% | 2025-01-27 | Fix |
| CVE-2024-54478 | Apple iPadOS out-of-bounds read | 6.5v3.1 | 0.6% | 2025-01-27 | Fix |
| CVE-2024-54475 | Apple macOS information disclosure | 3.3v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54468 | Apple iPadOS sandbox escape | 8.2v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-54146 | Cacti has a SQL injection vulnerability when view host template | 7.6CNA v3.1 | 46.1% | 2025-01-27 | Fix |
| CVE-2024-54145 | Cacti has a SQL injection vulnerability when request automation devices | 6.3CNA v3.1 | 0.7% | 2025-01-27 | Fix |
| CVE-2024-52012 | Apache Solr: Configset upload on Windows allows arbitrary path write-access | 5.4CISA ADP v3.1 | 45.0% | 2025-01-27 | Emerging ThreatsFix |
| CVE-2024-48841 | ABB FLXEON remote code execution (RCE) | 10.0CNA v4.0 | 4.4% | 2025-01-27 | Exploit codeFix |
| CVE-2024-48662 | AdGuard Application v.7.18.1 cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-48420 | Edimax Br-6476ac buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2025-01-27 | |
| CVE-2024-48419 | Edimax Br-6476ac command injection | 8.8CISA ADP v3.1 | 5.4% | 2025-01-27 | |
| CVE-2024-48418 | Edimax Br-6476ac cross-site request forgery | 8.8CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-48417 | Edimax Br-6476ac cross-site scripting | 5.2CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-48416 | Edimax Br-6476ac buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2025-01-27 | |
| CVE-2024-45598 | Cacti has a local file inclusion (LFI) vulnerability via Poller Standard Error Log Path | 6.0CNA v3.1 | 3.1% | 2025-01-27 | Fix |
| CVE-2024-44172 | Apple macOS incorrect authorization | 3.3v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-43446 | OTRS improper check of permissions in Generic interface | 3.5CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-43445 | OTRS Missing X-Content-Type-Options: Nosniff header allows MIME Type Sniffing | 5.4CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-38325 | IBM Storage Defender information disclosure | 5.9CNA v3.1 | 0.3% | 2025-01-27 | Fix |
| CVE-2024-38320 | IBM Storage Protect for Virtual Environments: Data Protection for VMware information disclosure | 5.9CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-37527 | IBM OpenPages with Watson cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-37526 | IBM Watson Query on Cloud Pak for data information disclosure | 6.5CNA v3.1 | 0.5% | 2025-01-27 | Fix |
| CVE-2024-28771 | IBM Security Directory Integrator information disclosure | 4.8CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-28770 | IBM Security Directory Integrator information disclosure | 4.8CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-28766 | IBM Security Directory Integrator information disclosure | 2.4CNA v3.1 | 0.3% | 2025-01-27 | Fix |
| CVE-2024-27256 | IBM MQ Operator information disclosure | 5.9CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-26317 | illumos elliptic curve point addition algorithm weak cryptographic algorithm | 6.1CISA ADP v3.1 | 0.2% | 2025-01-27 | |
| CVE-2024-22316 | IBM Sterling File Gateway improper access control | 4.3CNA v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-13117 | Social Share Buttons for WordPress plugin unauthenticated Image upload and path traversal | 6.5CISA ADP v3.1 | 0.5% | 2025-01-27 | |
| CVE-2024-13116 | Crelly Slider WordPress plugin Admin+ stored XSS | 3.8CISA ADP v3.1 | 0.3% | 2025-01-27 | Fix |
| CVE-2024-13095 | WP Triggers Lite WordPress plugin Admin+ SQL injection | 4.8CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-13094 | WP Triggers Lite WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.6% | 2025-01-27 | Nuclei |
| CVE-2024-13057 | Dyn Business Panel WordPress plugin stored XSS via CSRF | 7.1CISA ADP v3.1 | 0.2% | 2025-01-27 | |
| CVE-2024-13056 | Dyn Business Panel WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-13055 | Dyn Business Panel WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.5% | 2025-01-27 | Nuclei |
| CVE-2024-13052 | Dental Optimizer Patient Generator App WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.3% | 2025-01-27 | |
| CVE-2024-12774 | Altra Side Menu WordPress plugin Abitrary Menu deletion via CSRF | 6.5CISA ADP v3.1 | 0.2% | 2025-01-27 | |
| CVE-2024-12773 | Altra Side Menu WordPress plugin Admin+ SQL injection | 7.2CISA ADP v3.1 | 0.6% | 2025-01-27 | |
| CVE-2024-12740 | Dependency on vulnerable third-party component exposes vulnerabilities in NI Vision Software | 7.0CNA v4.0 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-12436 | WP Customer Area WordPress plugin Bulk delete via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-12345 | INW Krbyyyzo Daily Huddle Site gbo.aspx resource consumption | 6.7CNA v4.0 | 0.3% | 2025-01-27 | |
| CVE-2024-12321 | WC Affiliate WordPress plugin reflected XSS | 7.1CISA ADP v3.1 | 0.3% | 2025-01-27 | Fix |
| CVE-2024-12280 | WP Customer Area WordPress plugin Event Log deletion via CSRF | 4.3CISA ADP v3.1 | 0.2% | 2025-01-27 | Fix |
| CVE-2024-11348 | Reflected XSS in Eura7 CMSmanager | 5.3CNA v4.0 | 0.4% | 2025-01-27 | Fix |
| CVE-2024-46881 | gradle Enterprise incorrect permission assignment | 7.1CNA v3.1 | 0.3% | 2025-01-26 | Fix |