CVE-2024 list

CVE-2024 records published after 2024

Page five of six: records 4,001 to 5,000 of the 5,832 published after 2024, newest first. The first page carries the figures for After 2024.

CVE-2024 records published after 2024, newest first: records 4,001 to 5,000 of 5,832
CVE Summary CVSS EPSS Published Signals
CVE-2024-31906IBM Automation Decision Services information disclosure6.2CNA v3.10.2%2025-01-26Fix
CVE-2024-13505Survey Maker WordPress plugin authenticated (Admin+) stored cross-site scripting via Survey Question4.8v3.10.3%2025-01-26Fix
CVE-2024-12334WC Affiliate A Complete WooCommerce Affiliate WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-26Fix
CVE-2024-11936Zox News WordPress theme missing authorization authenticated arbitrary options update8.8CNA v3.10.4%2025-01-26Fix
CVE-2024-11641VikBooking Hotel Booking Engine and PMS WordPress plugin cross-site request forgery8.8CNA v3.10.3%2025-01-26Fix
CVE-2024-11090Membership Plugin WordPress plugin information disclosure7.5v3.10.5%2025-01-26Fix
CVE-2024-10705Multiple Page Generator Plugin MPG WordPress plugin server-side request forgery8.1v3.10.3%2025-01-26Fix
CVE-2024-10636Quiz Maker Business WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-26Fix
CVE-2024-10633Quiz Maker Business WordPress plugin eval injection7.3CNA v3.10.5%2025-01-26Fix
CVE-2024-10628Quiz Maker Business WordPress plugin SQL injection7.5CNA v3.10.8%2025-01-26Fix
CVE-2024-10574Quiz Maker Business WordPress plugin unauthorized access7.2CNA v3.10.5%2025-01-26Fix
CVE-2024-39750IBM Analytics Content Hub buffer overflow8.8CNA v3.10.7%2025-01-25Fix
CVE-2024-35150IBM Maximo Application Suite log manipulation5.3CNA v3.10.3%2025-01-25Fix
CVE-2024-35148IBM Maximo Application Suite SQL injection6.3CNA v3.10.4%2025-01-25Fix
CVE-2024-35145IBM Maximo Application Suite cross-site scripting6.1CNA v3.10.3%2025-01-25Fix
CVE-2024-35144IBM Maximo Application Suite information disclosure5.3CNA v3.10.3%2025-01-25Fix
CVE-2024-35134IBM Analytics Content Hub information disclosure5.3CNA v3.10.4%2025-01-25Fix
CVE-2024-35114IBM Control Center information disclosure5.3CNA v3.10.4%2025-01-25Fix
CVE-2024-35113IBM Control Center information disclosure4.3CNA v3.10.3%2025-01-25Fix
CVE-2024-35112IBM Control Center cross-site scripting5.4CNA v3.10.3%2025-01-25Fix
CVE-2024-35111IBM Control Center information disclosure4.3CNA v3.10.4%2025-01-25Fix
CVE-2024-13721Plethora Plugins Tabs + Accordions WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-25Fix
CVE-2024-13709Linear WordPress plugin cross-site request forgery to Cache reset4.3CNA v3.10.2%2025-01-25Fix
CVE-2024-13599LearnPress WordPress LMS plugin stored cross-site scripting5.4v3.10.3%2025-01-25Fix
CVE-2024-13586Masy Gallery WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-01-25
CVE-2024-13562Import WP WordPress plugin information disclosure7.5CNA v3.10.4%2025-01-25Fix
CVE-2024-13551ABC Notation WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-25
CVE-2024-13550ABC Notation WordPress plugin authenticated (Contributor+) arbitrary file read6.5CNA v3.10.7%2025-01-25
CVE-2024-13548Power Ups for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-25
CVE-2024-13467WP Contact Form7 Email Spam Blocker WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-25
CVE-2024-13458qchantelnotice SEO Friendly Accordion FAQ noticefaq shortcode stored cross-site scripting5.4v3.10.2%2025-01-25
CVE-2024-13450Contact Form by Bit Form WordPress plugin authenticated (Administrator+) server-side request forgery6.5v3.10.4%2025-01-25Fix
CVE-2024-13449Boom Fest WordPress plugin missing authorization authenticated plugin settings update4.3v3.10.3%2025-01-25Fix
CVE-2024-13441Bilingual Linker WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-25Fix
CVE-2024-13370Youzify WordPress plugin unauthorized access6.5CNA v3.10.4%2025-01-25Fix
CVE-2024-13368Youzify WordPress plugin unauthorized access4.3CNA v3.10.3%2025-01-25Fix
CVE-2024-12885Connections Business Directory WordPress plugin authenticated (Admin+) arbitrary directory deletion6.5CNA v3.10.6%2025-01-25
CVE-2024-12826GoHero Store Customizer for WooCommerce WordPress plugin unauthorized access4.3CNA v3.10.3%2025-01-25Fix
CVE-2024-12817Etsy Importer WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-25
CVE-2024-12816NOTICE BOARD BY TOWKIR WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-25
CVE-2024-12600Custom Product Tabs Lite for WooCommerce WordPress plugin PHP object injection7.2CNA v3.10.7%2025-01-25Fix
CVE-2024-12529brodos.net Onlineshop WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-01-25
CVE-2024-12512Ask Me Anything (Anonymously) WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-01-25
CVE-2024-12113KaineLabs Youzify missing authorization4.3CNA v3.10.3%2025-01-25Fix
CVE-2024-12076Target Video Easy Publish WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.3%2025-01-25Fix
CVE-2024-11825Broadstreet WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-25Fix
CVE-2024-10552Flexmls® IDX WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-25Fix
CVE-2024-57277InnoShop SVG file upload cross-site scripting5.7CISA ADP v3.10.5%2025-01-24
CVE-2024-57184gpac buffer overflow5.5CISA ADP v3.10.3%2025-01-24
CVE-2024-57095Go-admin Go-cms SQL injection6.8CISA ADP v3.10.6%2025-01-24
CVE-2024-57041NodeBB cross-site scripting (XSS)4.6CISA ADP v3.139.3%2025-01-24Fix
CVE-2024-56404One Identity Identity Manager authentication bypass9.9CNA v3.10.7%2025-01-24Fix
CVE-2024-52807HL7 fhir-ig-publisher XXE vulnerability in XSLT parsing in `org.HL7.fhir.publisher`8.6CNA v3.10.6%2025-01-24Fix
CVE-2024-50698Sungrowpower Winet-s heap-based buffer overflow9.8CISA ADP v3.10.6%2025-01-24Fix
CVE-2024-50697Sungrowpower Winet-s buffer overflow8.1CISA ADP v3.10.4%2025-01-24Fix
CVE-2024-50695Sungrowpower Winet-s stack-based buffer overflow9.8CISA ADP v3.10.6%2025-01-24Fix
CVE-2024-50694Sungrowpower Winet-s stack-based buffer overflow9.8CISA ADP v3.10.6%2025-01-24Fix
CVE-2024-50692Sungrowpower Winet-s hard-coded credentials5.4CISA ADP v3.10.2%2025-01-24Fix
CVE-2024-50690Sungrowpower Winet-s hard-coded credentials6.5CISA ADP v3.10.2%2025-01-24Fix
CVE-2024-45077IBM Maximo Asset Management file upload6.5CNA v3.10.3%2025-01-24Fix
CVE-2024-41757IBM Concert Software information disclosure5.9CNA v3.10.3%2025-01-24Fix
CVE-2024-41739IBM Cognos Dashboards on Cloud Pak for Data privilege escalation8.8CNA v3.10.4%2025-01-24Fix
CVE-2024-40706IBM InfoSphere Information Server information disclosure5.3CNA v3.10.4%2025-01-24Fix
CVE-2024-40693IBM Planning Analytics file upload8.0CNA v3.10.4%2025-01-24Fix
CVE-2024-35122IBM i denial of service2.8CNA v3.10.2%2025-01-24Fix
CVE-2024-25034IBM Planning Analytics file upload8.0CNA v3.10.4%2025-01-24Fix
CVE-2024-13698Jobify WordPress theme unauthorized access6.5CNA v3.10.3%2025-01-24Fix
CVE-2024-13683Automate Hub Free by Sperse.IO WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-01-24Fix
CVE-2024-13680Form Builder CP WordPress plugin authenticated (Contributor+) SQL injection6.5v3.10.5%2025-01-24Fix
CVE-2024-13659Listamester WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-24Fix
CVE-2024-13594Simple Downloads List WordPress plugin authenticated (Contributor+) SQL injection6.5v3.10.4%2025-01-24Fix
CVE-2024-13583Simple Gallery with Filter WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-24Fix
CVE-2024-13572Precious Metals Charts and Widgets for WordPress plugin stored cross-site scripting5.4v3.10.2%2025-01-24Fix
CVE-2024-13545Bootstrap Ultimate WordPress theme unauthenticated limited local file inclusion9.8v3.11.3%2025-01-24
CVE-2024-13542WP Google Street View & Google maps + Local SEO WordPress plugin stored cross-site scripting5.4v3.10.2%2025-01-24Fix
CVE-2024-13409Post Grid, Slider and Carousel Ultimate WordPress plugin local file inclusion8.8v3.10.9%2025-01-24Fix
CVE-2024-13408Post Grid, Slider and Carousel Ultimate WordPress plugin local file inclusion8.8v3.10.6%2025-01-24Fix
CVE-2024-13354Responsive Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.2%2025-01-24Fix
CVE-2024-13335Spexo Addons for Elementor WordPress plugin unauthorized access4.3CNA v3.10.2%2025-01-24Fix
CVE-2024-12494BMLT Meeting Map WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-24Fix
CVE-2024-11931Insufficient granularity of access control in GitLab6.4CNA v3.10.3%2025-01-24Fix
CVE-2024-11913Activity Plus Reloaded for BuddyPress WordPress plugin blind server-side request forgery5.4CNA v3.10.2%2025-01-24Fix
CVE-2024-10324RomethemeKit For Elementor WordPress plugin sensitive information exposure4.3CNA v3.10.3%2025-01-24Fix
CVE-2024-9499Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9498Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9497Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9496Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9495Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9494Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9493Uncontrolled search path can lead to DLL hijacking in ToolStick installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9492Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9491Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-9490Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer8.6CNA v3.10.2%2025-01-24Fix
CVE-2024-57947Linux kernel netfilter pipapo set memory leak9.8CNA v3.10.4%2025-01-23Fix
CVE-2024-57724Sammycage Lunasvg resource exhaustion6.5CISA ADP v3.10.3%2025-01-23
CVE-2024-57723Sammycage Lunasvg improper isolation6.5CISA ADP v3.10.3%2025-01-23
CVE-2024-57722Sammycage Lunasvg resource exhaustion7.5CISA ADP v3.10.5%2025-01-23
CVE-2024-57721Sammycage Lunasvg improper isolation6.5CISA ADP v3.10.3%2025-01-23
CVE-2024-57720Sammycage Lunasvg improper isolation6.5CISA ADP v3.10.3%2025-01-23
CVE-2024-57719Sammycage Lunasvg null pointer dereference6.5CISA ADP v3.10.4%2025-01-23
CVE-2024-57556Nbubna Store cross-site scripting vulnerability in store26.1v3.10.4%2025-01-23Fix
CVE-2024-57386Wallosapp Wallos cross-site scripting6.1v3.10.5%2025-01-23
CVE-2024-57329HortusFox cross-site scripting5.4CISA ADP v3.10.3%2025-01-23
CVE-2024-57328Projectworlds Online Food Ordering System login form SQL injection9.8v3.10.6%2025-01-23
CVE-2024-57326Online Pizza Delivery System search.php file of the reflected cross-site scripting6.1CISA ADP v3.10.3%2025-01-23
CVE-2024-55971Logitime WebClock SQL injection10.0CISA ADP v3.10.7%2025-01-23
CVE-2024-55930Xerox Workplace Suite weak default folder permissions6.7CNA v3.10.3%2025-01-23Fix
CVE-2024-55929Xerox Workplace Suite mail spoofing5.3CNA v3.10.2%2025-01-23Fix
CVE-2024-55928Xerox Workplace Suite clear text secrets returned and Remote system secrets in clear text6.5CNA v3.10.1%2025-01-23Fix
CVE-2024-55927Xerox Workplace Suite flawed token generation implementation and hard-coded key implementation7.6CNA v3.10.3%2025-01-23Fix
CVE-2024-55926Xerox Workplace Suite arbitrary file upload, deletion and read through header manipulation7.6CNA v3.10.4%2025-01-23Fix
CVE-2024-55925Xerox Workplace Suite API Security bypass through header manipulation7.5CNA v3.10.4%2025-01-23Fix
CVE-2024-55573Centreon web SQL injection7.2NVD v3.11.1%2025-01-23Fix
CVE-2024-55195OpenImageIO imagebuf.cpp resource exhaustion7.5CISA ADP v3.10.5%2025-01-23Fix
CVE-2024-55194OpenImageIO buffer overflow9.8v3.10.7%2025-01-23Fix
CVE-2024-55193OpenImageIO null pointer dereference9.8v3.10.5%2025-01-23
CVE-2024-55192OpenImageIO heap-based buffer overflow9.8v3.10.6%2025-01-23Fix
CVE-2024-53923Centreon web SQL injection7.2NVD v3.10.4%2025-01-23Fix
CVE-2024-53588iTop VPN v16.0 A DLL hijacking7.8CISA ADP v3.10.2%2025-01-23
CVE-2024-53379Real Time Logic SharkSSL TLS handshake buffer overflow7.5CISA ADP v3.10.5%2025-01-23
CVE-2024-53299Apache Wicket: An attacker can intentionally trigger a memory leak6.5CISA ADP v3.11.5%2025-01-23Fix
CVE-2024-52975Fleet Server sensitive information exposure via logs9.0CNA v3.10.3%2025-01-23Fix
CVE-2024-52972Kibana allocation of resources without limits or throttling leads to crash6.5CNA v3.10.4%2025-01-23Fix
CVE-2024-52331ECOVACS lawnmowers and vacuums deterministic firmware encryption key7.7CNA v4.00.2%2025-01-23
CVE-2024-52330ECOVACS lawnmowers and vacuums do not properly validate TLS certificates9.5CNA v4.00.3%2025-01-23Fix
CVE-2024-52329ECOVACS Home mobile app plugins do not properly validate TLS certificates7.4NVD v3.10.4%2025-01-23Fix
CVE-2024-52328ECOVACS lawnmowers and vacuums insecurely store audio warning files1.8CNA v4.00.2%2025-01-23
CVE-2024-52327ECOVACS lawnmower and vacuum cloud service live video PIN bypass6.0CNA v4.00.5%2025-01-23Fix
CVE-2024-52325ECOVACS robot lawnmowers and vacuums command injection5.8CNA v4.03.0%2025-01-23Fix
CVE-2024-50665gpac null pointer dereference5.5v3.10.2%2025-01-23
CVE-2024-50664gpac buffer overflow7.8v3.10.3%2025-01-23
CVE-2024-45672IBM Security Verify Bridge agent vulnerability6.0CNA v3.10.1%2025-01-23Fix
CVE-2024-43710Kibana server-side request forgery4.3CNA v3.10.3%2025-01-23Fix
CVE-2024-43708Elastic Kibana resource exhaustion6.5CNA v3.10.4%2025-01-23Fix
CVE-2024-43707Kibana exposure of sensitive information to an unauthorized actor7.7CNA v3.10.4%2025-01-23Fix
CVE-2024-42187HCL BigFix Patch Download Plug-ins are affected by path traversal5.3CNA v3.10.2%2025-01-23
CVE-2024-42186HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support2.8CNA v3.10.1%2025-01-23
CVE-2024-42185HCL BigFix patch download plug-ins XML injection2.5CNA v3.10.1%2025-01-23
CVE-2024-42184HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme2.5CNA v3.10.1%2025-01-23
CVE-2024-42183HCL BigFix Patch Download Plug-ins are affected by an arbitrary file download2.5CNA v3.10.1%2025-01-23
CVE-2024-42182HCL BigFix Patch Download Plug-ins are affected by server-side request forgery (SSRF)2.5CNA v3.10.1%2025-01-23
CVE-2024-13593BMLT Meeting Map WordPress plugin authenticated (Contributor+) local file inclusion8.8v3.10.7%2025-01-23Fix
CVE-2024-13511Variation Swatches for WooCommerce - cross-site request forgery to plugin Settings Reset4.3CNA v3.10.2%2025-01-23Fix
CVE-2024-13422SEO Blogger to WordPress Migration using 301 Redirection plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-23Fix
CVE-2024-13389Cliptakes WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-01-23Fix
CVE-2024-13340MDTF Meta Data and Taxonomies Filter WordPress plugin stored cross-site scripting5.4v3.10.3%2025-01-23Fix
CVE-2024-13236Tainacan WordPress plugin authenticated (Subscriber+) SQL injection6.5v3.10.5%2025-01-23Fix
CVE-2024-13234Product Table by WBW WordPress plugin Unuthenticated SQL injection9.8v3.10.5%2025-01-23Fix
CVE-2024-12957ASUS Armoury Crate missing authentication8.4CNA v4.00.2%2025-01-23
CVE-2024-12504Broadcast Live Video WordPress plugin stored cross-site scripting5.4v3.10.2%2025-01-23Fix
CVE-2024-12118The Events Calendar WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-01-23Fix
CVE-2024-12079ECOVACS lawnmowers cleartext storage of anti-theft PIN4.8CNA v4.00.2%2025-01-23
CVE-2024-12078ECOVACS lawnmowers and vacuums static BLE GATT encryption key5.3CNA v4.00.3%2025-01-23
CVE-2024-12043Prime Slider Addons For Elementor WordPress plugin stored cross-site scripting5.4v3.10.2%2025-01-23Fix
CVE-2024-11147ECOVACS lawnmowers and vacuums deterministic root password7.0CNA v4.00.4%2025-01-23
CVE-2024-10846compose-go YAML parser denial of service5.9CNA v3.10.2%2025-01-23Fix
CVE-2024-10539Reflected XSS in Uyumsoft's ERP5.5CNA v3.10.2%2025-01-23Fix
CVE-2024-56924CodeAstro Internet Banking System cross-site request forgery7.3CISA ADP v3.10.5%2025-01-22
CVE-2024-56923Cross-site scripting in Silverpeas Core5.4CISA ADP v3.10.3%2025-01-22Fix
CVE-2024-56914D-Link DSL-3782 buffer overflow5.7CISA ADP v3.10.3%2025-01-22
CVE-2024-55957Thermo Fisher Scientific Xcalibur and Foundation ICSW driver packages privilege escalation7.8CISA ADP v3.10.2%2025-01-22
CVE-2024-55488Umbraco-CMS stored cross-site scripting6.5CISA ADP v3.10.3%2025-01-22
CVE-2024-51457IBM Robotic Process Automation for Cloud Pak cross-site scripting4.4CNA v3.10.2%2025-01-22Fix
CVE-2024-42013GRAU DATA Blocky Blocky-Gui login enforcement authentication bypass6.4CISA ADP v3.10.2%2025-01-22
CVE-2024-42012GRAU DATA Blocky password storage vulnerability5.7CISA ADP v3.10.1%2025-01-22
CVE-2024-34235Open5GS reachable assertion8.6CISA ADP v3.10.8%2025-01-22
CVE-2024-31903IBM Sterling B2B Integrator Standard Edition code execution8.8CNA v3.11.0%2025-01-22Exploit codeFix
CVE-2024-24432Open5GS ogs_kdf_hash_mme function reachable assertion5.3CISA ADP v3.10.3%2025-01-22
CVE-2024-24430Open5GS mme_ue_find_by_imsi function reachable assertion7.5CISA ADP v3.10.8%2025-01-22
CVE-2024-24429Open5GS nas_eps_send_emm_to_esm function reachable assertion8.6CISA ADP v3.10.6%2025-01-22
CVE-2024-13590Ketchup Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-01-22Fix
CVE-2024-13584Picture Gallery Frontend Image Uploads, AJAX Photo List WordPress plugin stored cross-site scripting5.4v3.10.3%2025-01-22Fix
CVE-2024-13499rubengc GamiPress gamipress_do_shortcode function code injection7.3v3.10.6%2025-01-22Fix
CVE-2024-13496GamiPress WordPress plugin unauthenticated SQL injection via orderby parameter7.5v3.12.2%2025-01-22NucleiFix
CVE-2024-13495rubengc GamiPress gamipress_ajax_get_logs function code injection7.3v3.10.6%2025-01-22Fix
CVE-2024-13447WP Hotel Booking WordPress plugin missing authorization authenticated user email Retrieval4.3CNA v3.10.4%2025-01-22Fix
CVE-2024-13426WP-Polls WordPress plugin unauthenticated SQL injection to stored cross-site scripting5.3v3.10.5%2025-01-22Fix
CVE-2024-13406XML for Google Merchant Center WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-22Fix
CVE-2024-13361AI Power: Complete AI Pack WordPress plugin unauthorized access8.8v3.10.3%2025-01-22Fix
CVE-2024-13360AI Power: Complete AI Pack WordPress plugin authenticated (Subscriber+) server-side request forgery5.4CNA v3.10.2%2025-01-22Fix
CVE-2024-13319Themify Builder WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-22Fix
CVE-2024-13091WPBot Pro Wordpress Chatbot plugin unauthenticated arbitrary file upload9.8CNA v3.10.8%2025-01-22Fix
CVE-2024-12879WPBot Pro Wordpress Chatbot plugin missing authorization authenticated Simple Text Response creation4.3CNA v3.10.3%2025-01-22Fix
CVE-2024-12857AdForest WordPress theme authentication bypass9.8v3.10.7%2025-01-22Fix
CVE-2024-12477Avada Builder WordPress plugin stored cross-site scripting in Multiple Widgets5.4v3.10.2%2025-01-22Fix
CVE-2024-12117Stackable Page Builder Gutenberg Blocks WordPress plugin stored cross-site scripting5.4v3.10.3%2025-01-22Fix
CVE-2024-11218Red Hat Enterprise Linux 8 improper privilege management8.6CNA v3.10.4%2025-01-22Fix
CVE-2024-11166For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a7.1CNA v4.00.3%2025-01-22Fix
CVE-2024-10929Arm Cortex-A57, Cortex-A72, Cortex-A73 and Cortex-A75 branch predictor vulnerability5.1CISA ADP v3.10.2%2025-01-22Fix
CVE-2024-9310By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data can be transmitted to aircraft targets. This can lead to the appearance of fake aircraft on displays and potentially trigger undesired Resolution Advisories (RAs).6.0CNA v4.00.2%2025-01-22Fix
CVE-2024-57946Linux kernel virtio-blk driver deadlock5.5v3.10.2%2025-01-21Fix
CVE-2024-57945Linux kernel RISC-V vmemmap memory management out-of-bounds read7.8CNA v3.10.2%2025-01-21Fix
CVE-2024-57944Linux kernel ti-ads1298 ADC driver null pointer dereference5.5v3.10.2%2025-01-21Fix
CVE-2024-57943Linux kernel exFAT driver vulnerability7.8v3.10.2%2025-01-21Fix
CVE-2024-57942Linux kernel netfs Ceph cache writeback denial of service5.5v3.10.2%2025-01-21Fix
CVE-2024-57941Linux kernel netfs cache write-back vulnerability5.5v3.10.2%2025-01-21Fix
CVE-2024-57940Linux kernel exFAT directory reading infinite loop5.5NVD v3.10.2%2025-01-21Fix
CVE-2024-57939Linux kernel RISC-V exception handler vulnerability5.5v3.10.2%2025-01-21Fix
CVE-2024-57938Linux kernel SCTP association autoclose integer overflow5.5v3.10.2%2025-01-21Fix
CVE-2024-57936Linux kernel bnxt_re RDMA work request handling vulnerability9.8CNA v3.10.4%2025-01-21Fix
CVE-2024-57935In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it fails to modify QP to RTR, dip_ctx will not be attached. And during detroying QP, the invalid dip_ctx pointer will be accessed.5.5v3.10.2%2025-01-21Fix
CVE-2024-57934Linux kernel function graph tracer null pointer dereference4.7v3.10.2%2025-01-21Fix
CVE-2024-57933Linux kernel gve crash5.5v3.10.2%2025-01-21Fix
CVE-2024-57932Linux kernel gve driver XDP transmit divide by zero9.8CNA v3.10.5%2025-01-21Fix
CVE-2024-57931Linux kernel SELinux extended permissions handling vulnerability5.5v3.10.2%2025-01-21Fix
CVE-2024-57930Linux kernel ftrace event format checker vulnerability5.5v3.10.2%2025-01-21Fix
CVE-2024-57545Linksys E8450 buffer overflow5.5CISA ADP v3.10.4%2025-01-21
CVE-2024-57544Linksys E8450 buffer overflow5.5CISA ADP v3.10.4%2025-01-21
CVE-2024-57543Linksys E8450 buffer overflow5.5CISA ADP v3.10.4%2025-01-21
CVE-2024-57542Linksys E8450 OS command injection8.8CISA ADP v3.11.8%2025-01-21
CVE-2024-57541Linksys E8450 buffer overflow5.5CISA ADP v3.10.5%2025-01-21
CVE-2024-57540Linksys E8450 buffer overflow6.5CISA ADP v3.10.7%2025-01-21
CVE-2024-57539Linksys E8450 command injection8.2CISA ADP v3.11.4%2025-01-21
CVE-2024-57538Linksys E8450 buffer overflow6.5CISA ADP v3.10.7%2025-01-21
CVE-2024-57537Linksys E8450 buffer overflow6.3CISA ADP v3.10.4%2025-01-21
CVE-2024-57536Linksys E8450 command injection8.0CISA ADP v3.11.5%2025-01-21
CVE-2024-57360GNU Binutils nm --without-symbol-version option improper access control5.5CISA ADP v3.10.3%2025-01-21Fix
CVE-2024-57036TOTOLINK A810R command injection8.1CISA ADP v3.10.6%2025-01-21
CVE-2024-56998PHPGurukul Hospital Management System cross-site scripting4.2CISA ADP v3.10.2%2025-01-21
CVE-2024-56997PHPGurukul Hospital Management System cross-site scripting4.2CISA ADP v3.10.2%2025-01-21
CVE-2024-56990PHPGurukul Hospital Management System cross-site scripting4.5CISA ADP v3.10.4%2025-01-21
CVE-2024-56277Poll Maker WordPress plugin HTML injection5.3CNA v3.10.3%2025-01-21Fix
CVE-2024-55959Northern.tech Mender Client insecure permissions9.1CISA ADP v3.10.8%2025-01-21
CVE-2024-55958Northern.tech CFEngine Enterprise Mission Portal cross-site scripting4.8CISA ADP v3.10.4%2025-01-21
CVE-2024-55504RAR Extractor - Unarchiver exploit_combined.dylib code injection5.5CISA ADP v3.10.6%2025-01-21Exploit code
CVE-2024-54795eng Spagobi cross-site scripting5.4CISA ADP v3.10.5%2025-01-21
CVE-2024-54794eng Spagobi command injection9.1CISA ADP v3.112.8%2025-01-21
CVE-2024-54792eng Spagobi cross-site request forgery6.1CISA ADP v3.10.3%2025-01-21
CVE-2024-53829Cross-site request forgery in CodeChecker API8.2CNA v3.10.3%2025-01-21Fix
CVE-2024-52973Kibana allocation of resources without limits or throttling leads to crash6.5CNA v3.10.4%2025-01-21Fix
CVE-2024-51941Apache Ambari: Remote code injection in Ambari Metrics and AMS Alerts8.8CISA ADP v3.11.4%2025-01-21Fix
CVE-2024-51919Fancy Product Designer WordPress plugin unauthenticated arbitrary file upload9.0CNA v3.10.5%2025-01-21Fix
CVE-2024-51888Homey Login Register WordPress plugin privilege escalation9.8CNA v3.10.4%2025-01-21
CVE-2024-51818Fancy Product Designer WordPress plugin unauthenticated SQL injection9.3CNA v3.116.3%2025-01-21Exploit codeFix
CVE-2024-51417Property reflection in System.Linq.Dynamic.Core6.4CISA ADP v3.10.3%2025-01-21Fix
CVE-2024-49749Google Android dgif_lib.c out-of-bounds write8.8CISA ADP v3.10.2%2025-01-21Fix
CVE-2024-49748Google Android gatt_sr.cc out-of-bounds write9.8CISA ADP v3.10.4%2025-01-21Fix
CVE-2024-49747Google Android gatt_sr.cc out-of-bounds write9.8CISA ADP v3.10.5%2025-01-21Fix
CVE-2024-49745Google Android Parcel.cpp out-of-bounds write7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49744Google Android AccountManagerService.java privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49742Google Android privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49738Google Android Parcel.cpp out-of-bounds write7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49737Google Android WindowOrganizerController.java privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49736Google Android MainClear.java denial of service5.5CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49735Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49734Google Android ConnectivityService.java information disclosure7.5CISA ADP v3.10.3%2025-01-21Fix
CVE-2024-49733Google Android ServiceListing.java information disclosure5.5CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49732Google Android CompanionDeviceManagerService.java privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49724Google Android AccountManagerService.java privilege escalation7.0CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-49700ARPrice WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-21Fix
CVE-2024-49699ARPrice WordPress plugin PHP object injection8.8CNA v3.10.8%2025-01-21Exploit codeFix
CVE-2024-49688ARPrice WordPress plugin unauthenticated PHP object injection9.8CNA v3.10.5%2025-01-21Fix
CVE-2024-49666ARPrice WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-21Fix
CVE-2024-49655ARPrice WordPress plugin unauthenticated SQL injection9.3CNA v3.10.4%2025-01-21Fix
CVE-2024-49333Hero Menu WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-21
CVE-2024-49303Hero Menu WordPress plugin SQL injection8.5CNA v3.10.4%2025-01-21
CVE-2024-49300Hero Menu WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-21
CVE-2024-48392orangescrum cross-site scripting5.4CISA ADP v3.10.8%2025-01-21
CVE-2024-45687Payara Platform Payara Server HTTP headers CRLF injection2.4CNA v4.00.2%2025-01-21Fix
CVE-2024-45479Apache Ranger: SSRF in Edit service page Add logic to filter requests to localhost9.1CISA ADP v3.10.6%2025-01-21Fix
CVE-2024-45478Apache Ranger: Stored XSS in Edit service page Add logic to validate user input4.8CISA ADP v3.10.6%2025-01-21Fix
CVE-2024-45091IBM UrbanCode Deploy information disclosure6.2CNA v3.10.2%2025-01-21Fix
CVE-2024-43771Google Android gatt_sr.cc out-of-bounds write8.8CISA ADP v3.10.2%2025-01-21Fix
CVE-2024-43770Google Android gatt_sr.cc out-of-bounds write8.8CISA ADP v3.10.2%2025-01-21Fix
CVE-2024-43765Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-43763Google Android gatt_sr.cc denial of service6.5CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-43709Elasticsearch allocation of resources without limits or throttling leads to crash6.5CNA v3.10.6%2025-01-21Fix
CVE-2024-43096Google Android gatt_sr.cc out-of-bounds write8.8CISA ADP v3.10.2%2025-01-21Fix
CVE-2024-43095Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-42936Ruijie Rg-ew300n code injection9.8CISA ADP v3.11.1%2025-01-21
CVE-2024-37284Elastic Defend Improper Handling of Alternate Encoding leads to crash5.5CNA v3.10.2%2025-01-21Fix
CVE-2024-34730Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-01-21Fix
CVE-2024-32555Easy Real Estate WordPress plugin privilege escalation9.8CNA v3.10.6%2025-01-21Fix
CVE-2024-24451OpenAirInterface CN5G AMF SCTP receiver thread stack overflow7.5CISA ADP v3.10.9%2025-01-21Exploit code
CVE-2024-24445OpenAirInterface CN5G AMF NGAP protocol message handler null pointer dereference6.5CISA ADP v3.10.3%2025-01-21
CVE-2024-24444OpenAirInterface CN5G AMF SCTP connection handler vulnerability7.5CISA ADP v3.10.4%2025-01-21
CVE-2024-24443OpenAirInterface CN5G AMF PDU session resource setup response handler vulnerability6.5CISA ADP v3.10.3%2025-01-21
CVE-2024-24442OpenAirInterface CN5G AMF NGAP message receiver null pointer dereference7.5CISA ADP v3.10.4%2025-01-21
CVE-2024-24428Open5GS oai_nas_5gmm_decode function reachable assertion7.5v3.10.5%2025-01-21
CVE-2024-24427Open5GS amf_ue_set_suci function reachable assertion7.5v3.10.4%2025-01-21
CVE-2024-24424Magma NAS Access Point Name decoder denial of service7.5CISA ADP v3.10.4%2025-01-21
CVE-2024-24423Linux Foundation Magma out-of-bounds write7.5v3.10.6%2025-01-21
CVE-2024-24422Linux Foundation Magma out-of-bounds write7.5v3.10.6%2025-01-21
CVE-2024-24421Linux Foundation Magma nas_message_decode function type confusion9.8CISA ADP v3.10.9%2025-01-21
CVE-2024-24420Linux Foundation Magma decode_linked_ti_ie function reachable assertion7.5CISA ADP v3.10.6%2025-01-21
CVE-2024-24419Linux Foundation Magma buffer overflow7.5v3.10.6%2025-01-21
CVE-2024-24418Linux Foundation Magma buffer overflow7.5v3.10.6%2025-01-21
CVE-2024-24417Linux Foundation Magma buffer overflow7.5v3.10.6%2025-01-21
CVE-2024-24416Linux Foundation Magma buffer overflow7.5v3.10.6%2025-01-21
CVE-2024-21245Oracle JD Edwards EnterpriseOne Tools unauthorized data modification5.4CNA v3.10.2%2025-01-21Fix
CVE-2024-135361003 Mortgage Application WordPress plugin unauthenticated full path disclosure5.3CNA v3.10.4%2025-01-21
CVE-2024-13444wp-greet WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-01-21Fix
CVE-2024-13404Link Library WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-21Fix
CVE-2024-13230Social Share, Social Login and Social Comments Plugin WordPress plugin SQL injection5.3CNA v3.10.4%2025-01-21Fix
CVE-2024-12104Atarim missing authorization7.5v3.10.3%2025-01-21Fix
CVE-2024-12005WP-BibTeX WordPress plugin cross-site request forgery to stored and reflected cross-site scripting6.1v3.10.2%2025-01-21Fix
CVE-2024-11226FireCask Like and Share Button WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-21Fix
CVE-2024-10936String Locator WordPress plugin unauthenticated PHP object injection8.8CNA v3.11.1%2025-01-21Fix
CVE-2024-6466NEC WebSAM DeploymentManager clickjacking5.3CISA ADP v3.10.3%2025-01-21
CVE-2024-51738Sunshine improperly enforces pairing protocol request order7.7CNA v4.00.6%2025-01-20Fix
CVE-2024-45647IBM Security Verify Access unverified password change5.6CNA v3.10.3%2025-01-20Fix
CVE-2024-22349IBM UrbanCode Velocity information disclosure4.0CNA v3.10.2%2025-01-20Fix
CVE-2024-22348IBM UrbanCode Velocity cross-origin resource sharing5.3CNA v3.10.4%2025-01-20Fix
CVE-2024-22347IBM UrbanCode Velocity information disclosure5.9CNA v3.10.3%2025-01-20Fix
CVE-2024-13524obsproject OBS Studio untrusted search path2.0CNA v4.00.2%2025-01-20
CVE-2024-13454OpenVPN Easy-RSA weak cryptography5.3CISA ADP v3.10.1%2025-01-20Fix
CVE-2024-13176OpenSSL timing side-channel in ECDSA signature computation4.1CISA ADP v3.10.6%2025-01-20Fix
CVE-2024-57929Linux kernel device mapper array cursor vulnerability7.8CNA v3.10.3%2025-01-19Fix
CVE-2024-57928Linux kernel netfs buffered out-of-bounds read7.1v3.10.2%2025-01-19Fix
CVE-2024-57927Linux kernel NFS netfs cache write integration null pointer dereference5.5v3.10.2%2025-01-19Fix
CVE-2024-57926Linux kernel MediaTek DRM driver use-after-free7.8CNA v3.10.3%2025-01-19Fix
CVE-2024-57925Linux kernel ksmbd SMB2 interim response handling null pointer dereference7.1v3.10.2%2025-01-19Fix
CVE-2024-57924Linux kernel exportfs file handle encoding reachable assertion5.5NVD v3.10.3%2025-01-19Fix
CVE-2024-57923Linux kernel Btrfs zlib compression on s390 reachable assertion5.5v3.10.2%2025-01-19Fix
CVE-2024-57922Linux kernel AMD display DML ceil and floor helpers divide by zero5.5v3.10.3%2025-01-19Fix
CVE-2024-57921Linux kernel drm/amdgpu race condition7.8CNA v3.10.1%2025-01-19Fix
CVE-2024-57919Linux kernel AMD display manager plane scaling divide by zero5.5v3.10.2%2025-01-19Fix
CVE-2024-57918Linux kernel AMD display core surface handling vulnerability7.8CNA v3.10.2%2025-01-19Fix
CVE-2024-57917Linux kernel cpumap sysfs interface vulnerability7.8NVD v3.10.2%2025-01-19Fix
CVE-2024-57916Linux kernel pci1xxxx GPIO driver denial of service5.5v3.10.2%2025-01-19Fix
CVE-2024-57914Linux kernel TCPCI USB Type-C driver null pointer dereference5.5v3.10.2%2025-01-19Fix
CVE-2024-57913Linux kernel USB FunctionFS gadget driver binding race condition4.7NVD v3.10.2%2025-01-19Fix
CVE-2024-57912Linux kernel ZPA2326 pressure sensor driver triggered buffer information disclosure7.1v3.10.3%2025-01-19Fix
CVE-2024-57911Linux kernel IIO dummy driver triggered buffer information disclosure7.1v3.10.3%2025-01-19Fix
CVE-2024-57910Linux kernel VCNL4035 light sensor driver triggered buffer information disclosure7.1v3.10.2%2025-01-19Fix
CVE-2024-57909Linux kernel BH1745 light sensor driver triggered buffer information disclosure7.1v3.10.2%2025-01-19Fix
CVE-2024-57908Linux kernel KMX61 IMU driver triggered buffer information disclosure7.1v3.10.2%2025-01-19Fix
CVE-2024-57907Linux kernel Rockchip SARADC driver triggered buffer information disclosure7.1v3.10.2%2025-01-19Fix
CVE-2024-57906Linux kernel TI ADS8688 ADC driver triggered buffer information disclosure7.1v3.10.2%2025-01-19Fix
CVE-2024-57905Linux kernel TI ADS1119 ADC driver triggered buffer information disclosure7.1v3.10.2%2025-01-19Fix
CVE-2024-57904Linux kernel AT91 ADC touchscreen input driver vulnerability7.8v3.10.2%2025-01-19Fix
CVE-2024-45654IBM Security ReaQta improper input validation4.3CNA v3.10.4%2025-01-19Fix
CVE-2024-45653IBM Sterling Connect:Direct Web Services information disclosure4.3CNA v3.10.4%2025-01-19Fix
CVE-2024-45652IBM Maximo Asset Management directory traversal6.5CNA v3.10.8%2025-01-19Fix
CVE-2024-41783IBM Sterling Secure Proxy improper input validation9.1CNA v3.10.7%2025-01-19Fix
CVE-2024-41743IBM TXSeries for Multiplatforms denial of service7.5CNA v3.10.6%2025-01-19Fix
CVE-2024-41742IBM TXSeries for Multiplatforms denial of service7.5CNA v3.10.7%2025-01-19Fix
CVE-2024-38337IBM Sterling Secure Proxy improper input validation9.1CNA v3.10.5%2025-01-19Fix
CVE-2024-8722WP All Import Pro WordPress plugin stored cross-site scripting5.5CNA v3.10.3%2025-01-19Fix
CVE-2024-51448IBM Robotic Process Automation privilege escalation6.7CNA v3.10.1%2025-01-18Fix
CVE-2024-49824IBM Robotic Process Automation client-side enforcement of server-side security6.5CNA v3.10.3%2025-01-18Fix
CVE-2024-49354IBM Concert information disclosure5.3CNA v3.10.3%2025-01-18Fix
CVE-2024-49338IBM App Connect Enterprise information disclosure4.4CNA v3.10.4%2025-01-18Fix
CVE-2024-47113IBM ICP Voice Gateway XML injection8.1CNA v3.10.6%2025-01-18Fix
CVE-2024-47106IBM Jazz for Service Management information disclosure5.3CNA v3.10.4%2025-01-18Fix
CVE-2024-45662IBM Safer Payments denial of service7.5CNA v3.10.6%2025-01-18Fix
CVE-2024-13519MarketKing WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2025-01-18Fix
CVE-2024-13517Easy Digital Downloads WordPress plugin stored cross-site scripting4.0v3.10.2%2025-01-18Fix
CVE-2024-13516Kubio AI Page Builder WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-18Fix
CVE-2024-13515Image Source Control Lite WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-01-18Fix
CVE-2024-13433Utilities for MTG WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-18
CVE-2024-13432Webcamconsult WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-01-18Fix
CVE-2024-13393Video Share VOD Turnkey Video Site Builder Script WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-18Fix
CVE-2024-13392Rate Star Review Vote AJAX Reviews, Votes, Star Ratings WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-18Fix
CVE-2024-13391MicroPayments WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-18Fix
CVE-2024-13385JSM Screenshot Machine Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-18Fix
CVE-2024-13375Adifier System WordPress theme unauthenticated arbitrary password reset9.8CNA v3.11.4%2025-01-18Fix
CVE-2024-13317ShipWorks Connector for Woocommerce WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-01-18Fix
CVE-2024-13184The Ultimate WordPress Toolkit WP Extended plugin unauthenticated SQL injection7.5CNA v3.10.5%2025-01-18Exploit codeFix
CVE-2024-12696Picture Gallery Frontend Image Uploads, AJAX Photo List WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-01-18Fix
CVE-2024-12385WP Abstracts WordPress plugin cross-site request forgery to reflected cross-site scripting6.1CNA v3.10.2%2025-01-18Fix
CVE-2024-12071Evergreen Content Poster missing authorization5.3CNA v3.10.4%2025-01-18Fix
CVE-2024-11923Sensitive information disclosure in Fortra Application Hub Prior to5.5CNA v3.10.2%2025-01-18
CVE-2024-9020List category posts WordPress plugin Author+ stored XSS5.4CISA ADP v3.10.3%2025-01-18Fix
CVE-2024-57372InformationPush master version cross-site scripting6.1CISA ADP v3.10.4%2025-01-17
CVE-2024-57370Online Exam System cross-site scripting6.1CISA ADP v3.10.3%2025-01-17
CVE-2024-57369Typecho clickjacking6.4CISA ADP v3.10.4%2025-01-17
CVE-2024-57252OTCMS server-side request forgery4.3CISA ADP v3.10.3%2025-01-17
CVE-2024-57035WeGIA control.php SQL injection9.8v3.10.6%2025-01-17
CVE-2024-57034WeGIA query_geracao_auto.php SQL injection9.8v3.10.6%2025-01-17
CVE-2024-57033WeGIA cross-site scripting6.1CISA ADP v3.10.3%2025-01-17
CVE-2024-57032WeGIA incorrect authorization9.8v3.10.6%2025-01-17
CVE-2024-57031WeGIA remuneracao.php SQL injection9.8v3.10.6%2025-01-17
CVE-2024-57030WeGIA cross-site scripting8.1CISA ADP v3.10.6%2025-01-17
CVE-2024-54681Ossur Mobile Logic Application command injection2.0CNA v4.00.3%2025-01-17Fix
CVE-2024-53683Ossur Mobile Logic Application information disclosure5.6CNA v4.00.2%2025-01-17Fix
CVE-2024-52870Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unintended functionality (including Chromium Developer Tools) that can result in a client user accessing arbitrary remote websites.7.1CISA ADP v3.10.2%2025-01-17
CVE-2024-52363IBM InfoSphere Information Server directory traversal6.5CNA v3.10.6%2025-01-17Fix
CVE-2024-51462IBM QRadar WinCollect Agent modification of assumed-immutable data4.0CNA v3.10.4%2025-01-17Fix
CVE-2024-50967Becon DATAGerry /rest/rights/ endpoint information disclosure6.5CISA ADP v3.11.7%2025-01-17NucleiExploit code
CVE-2024-45832Ossur Mobile Logic Application use of hard-coded credentials2.0CNA v4.00.3%2025-01-17Fix
CVE-2024-34579Fuji Electric Alpha5 SMART stack-based buffer overflow8.5CNA v4.00.3%2025-01-17
CVE-2024-26157ETIC Telecom Remote Access Server (RAS) cross-site scripting5.3CNA v4.00.2%2025-01-17Fix
CVE-2024-26156ETIC Telecom Remote Access Server (RAS) cross-site scripting6.1v3.10.2%2025-01-17Fix
CVE-2024-26155ETIC Telecom Remote Access Server (RAS) cleartext transmission of sensitive information8.6v3.10.2%2025-01-17Fix
CVE-2024-26154ETIC Telecom Remote Access Server (RAS) cross-site scripting6.1v3.10.2%2025-01-17Fix
CVE-2024-26153ETIC Telecom Remote Access Server (RAS) cross-site request forgery6.3CNA v4.00.2%2025-01-17Fix
CVE-2024-13503Stack-based buffer overflow in Newtec's update signaling causes RCE9.5CNA v4.00.5%2025-01-17
CVE-2024-13502Newtec/iDirect NTC2218 OS command improper neutralization9.3CNA v4.00.6%2025-01-17
CVE-2024-13434WP Inventory Manager WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-17Fix
CVE-2024-13401Payment Button for PayPal WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2025-01-17Fix
CVE-2024-13398Checkout for PayPal WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-17Fix
CVE-2024-13386quote-posttype-plugin WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-17
CVE-2024-13378Gravity Forms WordPress plugin GravityForms - unauthenticated stored cross-site scripting5.4CNA v3.10.3%2025-01-17Fix
CVE-2024-13377Gravity Forms WordPress plugin stored cross-site scripting7.2CNA v3.10.3%2025-01-17Fix
CVE-2024-13367Sandbox WordPress plugin missing authorization to authenticated (Subscriber+) Sandbox download6.5CNA v3.10.4%2025-01-17
CVE-2024-13366Sandbox WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-17
CVE-2024-13333Advanced File Manager - Authenticated (Subscriber+) arbitrary file upload7.5CNA v3.10.9%2025-01-17Fix
CVE-2024-13026Inadequate encryption strength vulnerability in Roche Algo Edge6.1CNA v4.00.1%2025-01-17Fix
CVE-2024-12757Nedap Librix Ecoreader missing authentication for critical function8.8CNA v4.00.5%2025-01-17
CVE-2024-12703Schneider Electric RemoteConnect and SCADAPack x70 Utilities deserialization of untrusted data8.5CNA v4.00.3%2025-01-17Fix
CVE-2024-12637Moving Users WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.5%2025-01-17Fix
CVE-2024-12598MyBookProgress by Stormhill Media WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-17
CVE-2024-12508Glofox Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-17
CVE-2024-12476Schneider Electric Web Designer for BMXNOR0200H XML external entity injection8.4CNA v4.00.3%2025-01-17
CVE-2024-12466Proofreading WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-01-17Fix
CVE-2024-12399Schneider Electric ProFace GP-Pro EX improper message integrity enforcement6.1CNA v4.00.2%2025-01-17Fix
CVE-2024-12370WP Hotel Booking WordPress plugin missing authorization5.3CNA v3.10.3%2025-01-17Fix
CVE-2024-12203RSS Icon Widget WordPress plugin authenticated (Administrator+) stored cross-site scripting4.4CNA v3.10.3%2025-01-17
CVE-2024-12142Schneider Electric Modicon M340 processors information disclosure8.8CNA v4.00.3%2025-01-17Fix
CVE-2024-11425Schneider Electric Modicon M580 CPU incorrect buffer size calculation8.7CNA v4.00.6%2025-01-17Fix
CVE-2024-11146TrueFiling authorization bypass via user-controlled keys6.3v3.10.3%2025-01-17Fix
CVE-2024-11139Schneider Electric EcoStruxure Power Build Rapsody memory corruption4.6CNA v4.00.2%2025-01-17Fix
CVE-2024-10799Eventer WordPress plugin authenticated (Subscriber+) arbitrary file read6.5CNA v3.10.7%2025-01-17Fix
CVE-2024-10498Schneider Electric PowerLogic HDPM6000 memory corruption6.9CNA v4.00.4%2025-01-17Fix
CVE-2024-10497Schneider Electric PowerLogic HDPM6000 insecure direct object reference8.7CNA v4.00.6%2025-01-17Fix
CVE-2024-57785Zenitel AlphaWeb XE amc_uploads.php local file inclusion4.9CISA ADP v3.10.7%2025-01-16
CVE-2024-57784Zenitel AlphaWeb XE script_uploads.php path traversal5.5CISA ADP v3.11.0%2025-01-16
CVE-2024-57776JFinalOA /apply/getEditPage?view interface cross-site scripting4.6CISA ADP v3.10.3%2025-01-16
CVE-2024-57775JFinalOA SQL injection8.8v3.10.6%2025-01-16
CVE-2024-57774JFinalOA getBusinessUploadListPage?busid interface cross-site scripting4.8CISA ADP v3.10.3%2025-01-16
CVE-2024-57773JFinalOA openSelectManyUserPage?orgid interface cross-site scripting4.8CISA ADP v3.10.3%2025-01-16
CVE-2024-57772JFinalOA /bumph/getDraftListPage?type interface cross-site scripting4.8CISA ADP v3.10.3%2025-01-16
CVE-2024-57771JFinalOA common/getEditPage?view interface cross-site scripting4.8CISA ADP v3.10.3%2025-01-16
CVE-2024-57770JFinalOA SQL injection8.8v3.10.6%2025-01-16
CVE-2024-57769JFinalOA SQL injection8.8v3.10.6%2025-01-16
CVE-2024-57768JFinalOA SQL injection9.8CISA ADP v3.10.5%2025-01-16
CVE-2024-57704Tenda AC8 out-of-bounds write8.8v3.10.4%2025-01-16
CVE-2024-57703Tenda AC8 buffer overflow9.8v3.10.6%2025-01-16
CVE-2024-57684D-Link DIR-816 component formDMZ.cgi improper access control9.8CISA ADP v3.114.4%2025-01-16
CVE-2024-57683D-Link DIR-816 component websURLFilterAddDel improper access control4.3CISA ADP v3.10.5%2025-01-16
CVE-2024-57682D-Link DIR-816 component d_status.asp information disclosure6.5CISA ADP v3.10.5%2025-01-16
CVE-2024-57681D-Link DIR-816 component form2alg.cgi improper access control5.3CISA ADP v3.10.5%2025-01-16
CVE-2024-57680D-Link DIR-816 component form2PortriggerRule.cgi improper access control5.3CISA ADP v3.10.5%2025-01-16
CVE-2024-57679D-Link DIR-816 component form2RepeaterSetup.cgi improper access control6.5CISA ADP v3.10.6%2025-01-16
CVE-2024-57678D-Link DIR-816 component form2WlAc.cgi improper access control6.5CISA ADP v3.10.4%2025-01-16
CVE-2024-57677D-Link DIR-816 component form2Wan.cgi improper access control6.5CISA ADP v3.10.6%2025-01-16
CVE-2024-57676D-Link DIR-816 component form2WlanBasicSetup.cgi improper access control6.5CISA ADP v3.10.4%2025-01-16
CVE-2024-5761107FLY-CMS cross-site request forgery3.5CISA ADP v3.10.2%2025-01-16
CVE-2024-57583Tenda AC18 command injection9.8v3.11.5%2025-01-16
CVE-2024-57582Tenda AC18 out-of-bounds write9.8v3.10.8%2025-01-16
CVE-2024-57581Tenda AC18 out-of-bounds write9.8v3.10.8%2025-01-16
CVE-2024-57580Tenda AC18 out-of-bounds write9.8v3.10.8%2025-01-16
CVE-2024-57579Tenda AC18 out-of-bounds write9.8v3.10.7%2025-01-16
CVE-2024-57578Tenda AC18 buffer overflow8.8v3.10.5%2025-01-16
CVE-2024-57577Tenda AC18 buffer overflow5.7v3.10.3%2025-01-16
CVE-2024-57575Tenda AC18 out-of-bounds write9.8v3.10.8%2025-01-16
CVE-2024-57162Campcodes Cyber Cafe Management System SQL injection7.2v3.10.5%2025-01-16
CVE-2024-5716107FLY Customer Relationship Management cross-site request forgery4.3v3.10.2%2025-01-16
CVE-2024-5716007FLY Customer Relationship Management cross-site request forgery4.3v3.10.2%2025-01-16
CVE-2024-5715907FLY-CMS cross-site request forgery3.5CISA ADP v3.10.2%2025-01-16
CVE-2024-56515t2bot Matrix Media Repo thumbnail generation deserialization of untrusted data6.8CNA v3.10.6%2025-01-16Fix
CVE-2024-56144Stored XSS-LibreNMS-Display Name 2 in librenms4.6CNA v3.10.4%2025-01-16Fix
CVE-2024-56136/API/v1/JWT/fetch_api_key endpoint can leak if an email address has an account in Zulip Server6.9CNA v4.00.6%2025-01-16Fix
CVE-2024-55954OpenObserve improper authorization allows Admin User to Remove Root User8.7CNA v3.10.5%2025-01-16Fix
CVE-2024-55511Macrium Reflect null pointer dereference7.8CISA ADP v3.10.3%2025-01-16Exploit code
CVE-2024-54660Cloudera JDBC Connector for Hive and Impala krbJAASFile connection property vulnerability8.7CISA ADP v3.10.6%2025-01-16
CVE-2024-53553Opexustech Foiaxpress Public Access Link incorrect authorization9.1CISA ADP v3.10.6%2025-01-16
CVE-2024-52791t2bot matrix-media-repo denial of service through memory exhaustion in Matrix Media Repo5.3CNA v3.10.8%2025-01-16Fix
CVE-2024-52602t2bot matrix-media-repo server-side request forgery on redirects and federation in Matrix Media Repo5.0CNA v3.10.6%2025-01-16Fix
CVE-2024-52594Server-side request forgery (SSRF) on redirects and federation in gomatrixserverlib4.3CNA v3.10.3%2025-01-16Fix
CVE-2024-50633CERN Indico information disclosure7.5v3.10.6%2025-01-16Exploit codeFix
CVE-2024-50563Fortinet FortiManager Cloud improper authentication6.7CNA v3.10.6%2025-01-16Fix
CVE-2024-48885Fortinet FortiVoice path traversal5.2CNA v3.10.8%2025-01-16Fix
CVE-2024-48460Eugeny Tabby Sends Password Despite Host Key Verification failure4.3CISA ADP v3.10.4%2025-01-16Fix
CVE-2024-46450Tenda AC6 missing authorization8.1CISA ADP v3.10.4%2025-01-16
CVE-2024-45331Fortinet FortiAnalyzer Cloud incorrect privilege assignment6.9CNA v3.10.2%2025-01-16Fix
CVE-2024-41746IBM CICS TX cross-site scripting7.2CNA v3.10.2%2025-01-16Fix
CVE-2024-40514Themesbrand Chatvia themesebrand insecure permissions4.6CISA ADP v3.10.3%2025-01-16
CVE-2024-40513Themesbrand Chatvia unrestricted file upload4.6CISA ADP v3.10.5%2025-01-16
CVE-2024-37181Intel(R) Neural Compressor software some time-of-check time-of-use race condition2.1CNA v4.00.1%2025-01-16Fix
CVE-2024-36403t2bot matrix-media-repo denial of service/high operating costs5.3CNA v3.10.7%2025-01-16Fix
CVE-2024-36402t2bot Matrix Media Repo media download endpoint improper authentication5.3CNA v3.10.5%2025-01-16Fix
CVE-2024-13387WP Responsive Tabs WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-16Fix
CVE-2024-13355nmedia OrderConvo unrestricted file upload5.4CNA v3.10.4%2025-01-16Fix
CVE-2024-12615Passwords Manager WordPress plugin authenticated (Subscriber+) SQL injection6.5v3.10.5%2025-01-16Fix
CVE-2024-12614Passwords Manager WordPress plugin unauthorized access4.3NVD v3.10.4%2025-01-16Fix
CVE-2024-12613Passwords Manager WordPress plugin unauthenticated SQL injection7.5v3.10.5%2025-01-16Fix
CVE-2024-12427Multi Step Form WordPress plugin missing authorization to unauthenticated limited file upload5.3CNA v3.10.4%2025-01-16Fix
CVE-2024-12226Octopus Deploy Kubernetes Worker or Kubernetes Agent sensitive information in log files6.5CNA v3.10.4%2025-01-16Fix
CVE-2024-11452Chamber Dashboard Business Directory WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-16Fix
CVE-2024-10970StylemixThemes Motors code injection5.4CNA v3.10.3%2025-01-16Fix
CVE-2024-10789WP User Profile Avatar WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-01-16Fix
CVE-2024-57903Linux kernel SO_REUSEPORT socket option handling improper locking5.5v3.10.2%2025-01-15Fix
CVE-2024-57902Linux kernel AF_PACKET VLAN tag extraction denial of service7.3CNA v3.10.3%2025-01-15Fix
CVE-2024-57901Linux kernel AF_PACKET VLAN protocol extraction denial of service7.3CNA v3.10.3%2025-01-15Fix
CVE-2024-57900Linux kernel ILA address mapping registration use-after-free7.8v3.10.3%2025-01-15Fix
CVE-2024-57899In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using or_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_B7.6CNA v3.10.3%2025-01-15Fix
CVE-2024-57898Linux kernel cfg80211 multi-link deletion vulnerability3.3v3.10.2%2025-01-15Fix
CVE-2024-57897In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Correct the migration DMA map direction The SVM DMA device map direction should be set the same as the DMA unmap setting, otherwise the DMA core will report the following warning. Before finialize this solution, there5.5v3.10.3%2025-01-15Fix
CVE-2024-57896Linux kernel Btrfs unmount cleanup path use-after-free7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57895Linux kernel ksmbd file attribute handling vulnerability7.1CNA v3.10.4%2025-01-15Fix
CVE-2024-57893Linux kernel ALSA sequencer OSS SysEx handling race condition7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57892Linux kernel OCFS2 quota subsystem use-after-free7.8v3.10.2%2025-01-15Fix
CVE-2024-57891Linux kernel sched_ext scheduler bypass mode improper locking5.5v3.10.2%2025-01-15Fix
CVE-2024-57890Linux kernel RDMA userspace verbs interface integer overflow5.5v3.10.2%2025-01-15Fix
CVE-2024-57889Linux kernel MCP23S08 pin controller driver improper locking5.5v3.10.2%2025-01-15Fix
CVE-2024-57888Linux kernel workqueue cancellation handling vulnerability5.5v3.10.2%2025-01-15Fix
CVE-2024-57887Linux kernel ADV7533 DSI bridge driver use-after-free7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57886Linux kernel DAMON target commit memory leak5.5v3.10.2%2025-01-15Fix
CVE-2024-57885Linux kernel kmemleak scan reporting improper locking5.5v3.10.2%2025-01-15Fix
CVE-2024-57884Linux kernel direct reclaim throttling infinite loop5.5NVD v3.10.2%2025-01-15Fix
CVE-2024-57883Linux kernel hugetlb PMD page table sharing vulnerability7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57882Linux kernel MPTCP TCP options handling null pointer dereference9.8CNA v3.10.5%2025-01-15Fix
CVE-2024-57857Linux kernel RDMA/siw use-after-free7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57844Linux kernel Xe graphics driver vulnerability5.5v3.10.2%2025-01-15Fix
CVE-2024-57841Linux kernel TCP connection request handling memory leak5.5v3.10.2%2025-01-15Fix
CVE-2024-57802Linux kernel NetRom protocol vulnerability9.4CNA v3.10.6%2025-01-15Fix
CVE-2024-57801Linux kernel net/mlx5e use-after-free7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57795Linux kernel RXE RDMA driver use-after-free7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-57767wangl1989 mysiteforme server-side request forgery8.6CISA ADP v3.10.4%2025-01-15
CVE-2024-57766wangl1989 mysiteforme deserialization of untrusted data9.1CISA ADP v3.10.5%2025-01-15
CVE-2024-57765wangl1989 mysiteforme SQL injection7.5CISA ADP v3.10.4%2025-01-15
CVE-2024-57764wangl1989 mysiteforme deserialization of untrusted data9.1CISA ADP v3.10.5%2025-01-15
CVE-2024-57763wangl1989 mysiteforme deserialization of untrusted data9.1CISA ADP v3.10.5%2025-01-15
CVE-2024-57762wangl1989 mysiteforme deserialization of untrusted data7.5CISA ADP v3.10.5%2025-01-15
CVE-2024-57761Huayi-tec JEEWMS parserXML method arbitrary file upload8.1CISA ADP v3.10.5%2025-01-15
CVE-2024-57760JEEWMS SQL injection6.5CISA ADP v3.10.4%2025-01-15
CVE-2024-57757JEEWMS missing authorization7.5CISA ADP v3.10.4%2025-01-15
CVE-2024-57728SimpleHelp path traversal7.2v3.164.7%2025-01-15KEVNucleiKCVFix
CVE-2024-57727SimpleHelp path traversal7.5NVD v3.196.6%2025-01-15KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2024-57726SimpleHelp missing authorization9.9v3.166.6%2025-01-15KEVNucleiKCVFix
CVE-2024-57025TOTOLINK X5000R OS command injection6.8CISA ADP v3.11.4%2025-01-15
CVE-2024-57024TOTOLINK X5000R OS command injection6.8CISA ADP v3.11.5%2025-01-15
CVE-2024-57023TOTOLINK X5000R OS command injection6.8CISA ADP v3.11.4%2025-01-15
CVE-2024-57022TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57021TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57020TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57019TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57018TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57017TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57016TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57015TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57014TOTOLINK X5000R OS command injection8.8v3.11.2%2025-01-15
CVE-2024-57013TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57012TOTOLINK X5000R OS command injection8.8v3.11.6%2025-01-15
CVE-2024-57011TOTOLINK X5000R OS command injection8.8v3.11.7%2025-01-15
CVE-2024-56295Poll Maker WordPress plugin broken access control6.5v3.10.4%2025-01-15Fix
CVE-2024-55577The Dimensional Gate Linux Ratfor stack-based buffer overflow7.0CNA v3.00.3%2025-01-15Fix
CVE-2024-55503Termius untrusted search path3.3v3.10.4%2025-01-15Exploit code
CVE-2024-54540Microsoft Windows cross-site scripting4.3v3.10.2%2025-01-15Fix
CVE-2024-54535Apple macOS path traversal4.3v3.10.5%2025-01-15Fix
CVE-2024-54470Apple iOS and iPadOS missing authorization4.6v3.10.3%2025-01-15Fix
CVE-2024-54031Linux kernel netfilter nft_set_hash vulnerability5.5v3.10.2%2025-01-15Fix
CVE-2024-53681Linux kernel nvmet buffer overflow5.5v3.10.2%2025-01-15Fix
CVE-2024-53407Phiewer untrusted search path3.3v3.10.5%2025-01-15Exploit code
CVE-2024-52783XINJE XDPPro.exe XNetSocketClient insecure permissions5.1CISA ADP v3.10.2%2025-01-15
CVE-2024-52005The sideband payload is passed unfiltered to the terminal in git7.5CNA v4.00.5%2025-01-15Exploit codeFix
CVE-2024-50954The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network (LAN), sending a specific Modbus message to the controller can caus7.5CISA ADP v3.10.4%2025-01-15
CVE-2024-50953XINJE XL5E-16T Modbus message handling resource exhaustion7.5CISA ADP v3.10.4%2025-01-15
CVE-2024-48126HI-SCAN 6040i Hitrax HX-03-19-I vendor support access hard-coded credentials9.8CISA ADP v3.10.4%2025-01-15
CVE-2024-48125HI-SCAN 6040i Hitrax HX-03-19-I AsDB service information disclosure7.5CISA ADP v3.10.4%2025-01-15
CVE-2024-48123HI-SCAN 6040i Hitrax HX-03-19-I USB Autorun function untrusted search path8.4CISA ADP v3.10.2%2025-01-15
CVE-2024-48122HI-SCAN insecure default configuration6.7CISA ADP v3.10.2%2025-01-15
CVE-2024-48121HI-SCAN 6040i Hitrax HX-03-19-I cleartext transmission of sensitive information6.5CISA ADP v3.10.2%2025-01-15
CVE-2024-47140Observium add_alert_check page cross-site scripting5.4NVD v3.10.7%2025-01-15
CVE-2024-47002Observium vlan management part code injection5.4NVD v3.115.6%2025-01-15
CVE-2024-45061Observium weather map editor functionality cross-site scripting5.4NVD v3.11.1%2025-01-15
CVE-2024-44136Apple iOS and iPadOS incorrect authorization4.6NVD v3.10.4%2025-01-15Fix
CVE-2024-41454An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.6.5CISA ADP v3.10.5%2025-01-15
CVE-2024-41453Process Maker pm4core-docker cross-site scripting4.8CISA ADP v3.10.3%2025-01-15Exploit code
CVE-2024-40854Apple macOS denial of service5.5v3.10.4%2025-01-15Fix
CVE-2024-40839Apple iOS and iPadOS missing authorization2.4v3.10.2%2025-01-15Fix
CVE-2024-40771Apple macOS incorrect authorization7.8v3.10.2%2025-01-15Fix
CVE-2024-39967Aginode GigaSwitch v5 insecure permissions6.5CISA ADP v3.10.3%2025-01-15
CVE-2024-39282Linux kernel t7xx WWAN driver vulnerability7.8CNA v3.10.2%2025-01-15Fix
CVE-2024-36751Parse-uri regular expression denial of service (ReDoS)6.5CISA ADP v3.10.5%2025-01-15
CVE-2024-36476Linux kernel RDMA RTRS transport null pointer dereference9.8CNA v3.10.6%2025-01-15Fix
CVE-2024-35280Fortinet FortiDeceptor cross-site scripting5.1CNA v3.10.3%2025-01-15Fix
CVE-2024-27856Apple Safari code injection7.8v3.10.6%2025-01-15Fix
CVE-2024-13394ViewMedica 9 WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.4%2025-01-15Fix
CVE-2024-13351Social proof testimonials and reviews by Repuso WordPress plugin stored cross-site scripting7.2CNA v3.10.4%2025-01-15Fix
CVE-2024-13334Car Demon WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-15
CVE-2024-13215Elementor Addon Elements WordPress plugin sensitive information exposure4.3CNA v3.10.5%2025-01-15Fix
CVE-2024-12818WP Smart TV WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-15Fix
CVE-2024-12593PDF for WPForms + Drag and Drop Template Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-01-15Fix
CVE-2024-12423Contact Form 7 Redirect and Thank You Page WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-01-15Fix
CVE-2024-12403Image Gallery Responsive Photo Gallery WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-01-15Fix
CVE-2024-12297Moxa EDS-508A Series Frontend Authorization Logic Disclosure vulnerability9.2CNA v4.00.8%2025-01-15Fix
CVE-2024-12084Rsync: Heap buffer overflow in rsync due to improper checksum length handling9.8CNA v3.172.5%2025-01-15Emerging ThreatsExploit codeKCVFix
CVE-2024-11870Event Registration Calendar By vcita WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-15
CVE-2024-11851NitroPack WordPress plugin missing authorization authenticated arbitrary Transient update4.3CNA v3.10.3%2025-01-15Fix
CVE-2024-11848NitroPack WordPress plugin missing authorization authenticated limited options update8.1CNA v3.10.7%2025-01-15Exploit codeFix
CVE-2024-11322CyberPower PowerPanel Business Unauthenticated Restart DoS7.5CNA v3.10.6%2025-01-15
CVE-2024-11029Red Hat Enterprise Linux 9 freeipa: Administrative user data leaked through systemd journal5.5CNA v3.10.2%2025-01-15Fix
CVE-2024-10775Piotnet Addons For Elementor WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2025-01-15Fix
CVE-2024-9636Post Grid and Gutenberg Blocks - unauthenticated privilege escalation9.8CNA v3.10.8%2025-01-15Fix
CVE-2024-8603B&R Industrial Automation Automation Runtime weak cryptographic algorithm8.2CNA v4.00.3%2025-01-15Fix
CVE-2024-7322silabs.com Ember ZNet DoS in ZigBee device due to unsolicited encrypted rejoin response5.8CNA v3.10.3%2025-01-15Fix
CVE-2024-7085OpenText Solutions Business Manager stored cross-site scripting8.2CNA v4.00.4%2025-01-15
CVE-2024-5198OpenVPN ovpn-dco null pointer dereference3.3CISA ADP v3.10.1%2025-01-15Fix
CVE-2024-4227gSOAP: Vulnerable to specially crafted unencrypted SDC messages7.5CNA v3.10.7%2025-01-15Fix
CVE-2024-57664Openlinksw Virtuoso resource exhaustion7.5CISA ADP v3.10.6%2025-01-14Fix
CVE-2024-57663Openlinksw Virtuoso resource exhaustion7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57662Openlinksw Virtuoso resource exhaustion7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57661Openlinksw Virtuoso improper resource release7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57660Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57659Openlinksw Virtuoso improper resource release7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57658Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57657Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.9%2025-01-14Fix
CVE-2024-57656Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57655Openlinksw Virtuoso denial of service7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57654Openlinksw Virtuoso improper resource release7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57653Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57652Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57651Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.9%2025-01-14Fix
CVE-2024-57650Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.9%2025-01-14Fix
CVE-2024-57649Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.6%2025-01-14Fix
CVE-2024-57648Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.9%2025-01-14Fix
CVE-2024-57647Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57646Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.6%2025-01-14Fix
CVE-2024-57645Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.6%2025-01-14Fix
CVE-2024-57644Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.6%2025-01-14Fix
CVE-2024-57643Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.9%2025-01-14Fix
CVE-2024-57642Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.8%2025-01-14Fix
CVE-2024-57641Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57640Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57639Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.6%2025-01-14Fix
CVE-2024-57638Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57637Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57636Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.9%2025-01-14Fix
CVE-2024-57635Openlinksw Virtuoso SQL injection7.5CISA ADP v3.10.7%2025-01-14Fix
CVE-2024-57634Monetdb SQL injection7.5CISA ADP v3.10.8%2025-01-14
CVE-2024-57633Monetdb SQL injection7.5CISA ADP v3.10.5%2025-01-14
CVE-2024-57632Monetdb SQL injection7.5CISA ADP v3.10.8%2025-01-14
CVE-2024-57631Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57630Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57629Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57628Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57627Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57626Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57625Monetdb SQL injection7.5CISA ADP v3.10.8%2025-01-14
CVE-2024-57624Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57623Monetdb improper resource release7.5CISA ADP v3.10.7%2025-01-14
CVE-2024-57622Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57621Monetdb SQL injection7.5CISA ADP v3.10.8%2025-01-14
CVE-2024-57620Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57619Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57618Monetdb improper resource release7.5CISA ADP v3.10.5%2025-01-14
CVE-2024-57617Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57616Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57615Monetdb SQL injection7.5CISA ADP v3.10.6%2025-01-14
CVE-2024-57483Tenda i24 buffer overflow9.8CISA ADP v3.10.5%2025-01-14
CVE-2024-57482H3C N12 buffer overflow9.8CISA ADP v3.10.8%2025-01-14
CVE-2024-57480H3C N12 buffer overflow9.8CISA ADP v3.10.5%2025-01-14
CVE-2024-57479H3C N12 buffer overflow9.8CISA ADP v3.10.5%2025-01-14
CVE-2024-57473H3C N12 buffer overflow9.8CISA ADP v3.10.8%2025-01-14
CVE-2024-57471H3C N12 buffer overflow9.8CISA ADP v3.10.8%2025-01-14
CVE-2024-56841Siemens Mendix LDAP LDAP injection9.1CNA v4.00.5%2025-01-14Fix
CVE-2024-56497Fortinet FortiMail OS command injection6.5CNA v3.10.6%2025-01-14Fix
CVE-2024-56374Django has a potential denial of service vulnerability in IPv6 validation7.5v3.11.9%2025-01-14Fix
CVE-2024-55945Cross-site request forgery in DB Check module in TYPO34.3CNA v3.10.2%2025-01-14Fix
CVE-2024-55924Cross-site request forgery in Scheduler module in TYPO38.0CNA v3.10.3%2025-01-14Fix
CVE-2024-55923Cross-site request forgery in Indexed Search module in TYPO34.3CNA v3.10.2%2025-01-14Fix
CVE-2024-55922Cross-site request forgery in Form Framework module in TYPO35.4CNA v3.10.2%2025-01-14Fix
CVE-2024-55921Cross-site request forgery in Extension Manager module in TYPO37.5CNA v3.10.4%2025-01-14Fix
CVE-2024-55920Cross-site request forgery in Dashboard module in TYPO34.3CNA v3.10.2%2025-01-14Fix
CVE-2024-55894TYPO3 cross-site request forgery in Backend User module4.3CNA v3.10.2%2025-01-14Fix
CVE-2024-55893TYPO3 cross-site request forgery in Log module4.3CNA v3.10.2%2025-01-14Fix
CVE-2024-55892Potential open redirect via Parsing Differences in TYPO34.8CNA v3.10.2%2025-01-14Fix
CVE-2024-55891Information disclosure via Exception Handling/Logger in TYPO33.1CNA v3.10.3%2025-01-14Fix
CVE-2024-55593Fortinet FortiWeb SQL injection2.6CNA v3.10.4%2025-01-14Fix
CVE-2024-55591Fortinet FortiOS and FortiProxy authentication bypass9.6CNA v3.194.4%2025-01-14KEVNucleiEmerging ThreatsExploit codeFix
CVE-2024-55000Mayuri K House Rental Management System cross-site scripting5.4CISA ADP v3.10.3%2025-01-14
CVE-2024-54730Flatnotes image upload function denial of service7.5CISA ADP v3.10.5%2025-01-14
CVE-2024-54142Cross-site scripting via Discourse-ai SharedAiConversation onebox in Discourse9.1CNA v3.10.4%2025-01-14Fix
CVE-2024-54021Fortinet FortiOS HTTP headers CRLF injection6.4CNA v3.10.8%2025-01-14Fix
CVE-2024-53649Siemens SIPROTEC 5 6MD84 (CP300) files accessible to external parties7.1CNA v4.00.6%2025-01-14Fix
CVE-2024-53563Arcadyan Meteor stored cross-site scripting5.4CISA ADP v3.10.2%2025-01-14
CVE-2024-53561Arcadyan Meteor remote code execution8.7CISA ADP v3.10.6%2025-01-14
CVE-2024-53277Cross-site scripting in form messages in silverstripe Framework5.4CNA v3.10.3%2025-01-14Fix
CVE-2024-53263git-lfs git LFS permits exfiltration of credentials via crafted HTTP URLs8.5CNA v4.01.1%2025-01-14Fix
CVE-2024-52969Fortinet FortiSIEM SQL injection3.7CNA v3.10.5%2025-01-14Fix
CVE-2024-52967Fortinet FortiPortal cross-site scripting3.3CNA v3.10.4%2025-01-14Fix
CVE-2024-52963Fortinet FortiOS A out-of-bounds write3.5CNA v3.10.8%2025-01-14Fix
CVE-2024-52898IBM MQ information disclosure6.2CNA v3.10.2%2025-01-14Fix
CVE-2024-52006Newline confusion in credential helpers can lead to credential exfiltration in git2.1CNA v4.01.1%2025-01-14Fix
CVE-2024-50861Gestioip cross-site scripting6.1CISA ADP v3.10.8%2025-01-14Exploit code
CVE-2024-50859Gestioip cross-site scripting4.8CISA ADP v3.10.9%2025-01-14Exploit code
CVE-2024-50858Gestioip cross-site request forgery8.8CISA ADP v3.11.7%2025-01-14Exploit code
CVE-2024-50857Gestioip cross-site scripting4.8CISA ADP v3.11.2%2025-01-14NucleiExploit code
CVE-2024-50566Fortinet FortiManager OS command injection7.2CNA v3.11.1%2025-01-14Fix
CVE-2024-50564Fortinet FortiClientWindows hard-coded cryptographic key3.2CNA v3.10.2%2025-01-14Fix
CVE-2024-50349Git does not sanitize URLs when asking for credentials interactively2.1CNA v4.00.7%2025-01-14Fix
CVE-2024-50338git-ecosystem Git Credential Manager credential protocol parsing information disclosure7.4CNA v3.13.2%2025-01-14Fix
CVE-2024-49375RasaHQ rasa-pro-security-advisories remote code execution via Remote Model Loading in Rasa9.1CNA v3.10.9%2025-01-14Exploit codeFix
CVE-2024-48893Fortinet FortiSOAR cross-site scripting6.4CNA v3.10.5%2025-01-14Fix
CVE-2024-48890Fortinet FortiSOAR OS command injection6.3CNA v3.11.1%2025-01-14Fix
CVE-2024-48886Fortinet FortiOS A improper authentication8.0CNA v3.10.5%2025-01-14Fix
CVE-2024-48884Fortinet FortiOS path traversal6.7CNA v3.115.2%2025-01-14Fix
CVE-2024-48858Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform7.5CNA v3.10.6%2025-01-14Fix
CVE-2024-48857Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform7.5CNA v3.10.4%2025-01-14Fix
CVE-2024-48856Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform9.8CNA v3.10.6%2025-01-14Fix
CVE-2024-48855Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform5.3CNA v3.10.4%2025-01-14Fix
CVE-2024-48854Vulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform5.3CNA v3.10.4%2025-01-14Fix
CVE-2024-48760Gestioip unrestricted file upload9.8CISA ADP v3.145.1%2025-01-14MetasploitExploit code
CVE-2024-47605Cross-site scripting via insert media remote file oembed in silverstripe-asset-admin5.4CNA v3.11.2%2025-01-14Exploit codeFix
CVE-2024-47572Fortinet FortiSOAR csv file improper neutralization8.3CNA v3.10.6%2025-01-14Fix
CVE-2024-47571Fortinet FortiManager operation on a released resource7.9CNA v3.10.9%2025-01-14Fix
CVE-2024-47566Fortinet FortiRecorder path traversal4.8CNA v3.10.2%2025-01-14Fix
CVE-2024-47100Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly cross-site request forgery7.2CNA v4.00.2%2025-01-14Fix
CVE-2024-46670Fortinet FortiOS out-of-bounds read7.5CNA v3.10.6%2025-01-14Fix
CVE-2024-46669Fortinet FortiOS integer overflow3.2CNA v3.10.6%2025-01-14Fix
CVE-2024-46668Fortinet FortiOS resource exhaustion7.1CNA v3.11.0%2025-01-14Fix
CVE-2024-46667Fortinet FortiSIEM resource exhaustion6.9CNA v3.10.6%2025-01-14Fix
CVE-2024-46666Fortinet FortiOS resource exhaustion4.8CNA v3.10.7%2025-01-14Fix
CVE-2024-46665Fortinet FortiOS information disclosure3.5CNA v3.10.5%2025-01-14Fix
CVE-2024-46664Fortinet FortiRecorder relative path traversal5.2CNA v3.10.5%2025-01-14Fix
CVE-2024-45627Apache Linkis Metadata Query Service JDBC data source arbitrary file read5.9CISA ADP v3.10.3%2025-01-14Fix
CVE-2024-45385Siemens Industrial Edge Management OS (IEM-OS) cross-site scripting2.1CNA v4.00.3%2025-01-14
CVE-2024-45326Fortinet FortiDeceptor improper access control3.9CNA v3.10.3%2025-01-14Fix
CVE-2024-45102Lenovo XClarity Administrator cleartext transmission of sensitive information6.8CNA v3.10.2%2025-01-14Fix
CVE-2024-42911Ecovacs Deebot T20 OMNI WiFi code injection7.4CISA ADP v3.10.5%2025-01-14
CVE-2024-42444AMI AptioV TOCTOU race condition between DMA and SMM7.5CNA v3.10.1%2025-01-14Fix
CVE-2024-40587Fortinet FortiVoice OS command injection6.3CNA v3.10.6%2025-01-14Fix
CVE-2024-39803Wavlink AC3000 qos.cgi qos_settings functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-39802Wavlink AC3000 qos.cgi qos_settings functionality buffer overflow7.2NVD v3.10.9%2025-01-14
CVE-2024-39801Wavlink AC3000 qos.cgi qos_settings functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-39800Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.9%2025-01-14
CVE-2024-39799Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.3%2025-01-14
CVE-2024-39798Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.9%2025-01-14
CVE-2024-39795Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.5%2025-01-14
CVE-2024-39794Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.1%2025-01-14
CVE-2024-39793Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.5%2025-01-14
CVE-2024-39790Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.5%2025-01-14
CVE-2024-39789Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.1%2025-01-14
CVE-2024-39788Wavlink AC3000 external control of a configuration setting7.2NVD v3.11.5%2025-01-14
CVE-2024-39787Wavlink AC3000 nas.cgi add_dir functionality path traversal7.2NVD v3.12.5%2025-01-14
CVE-2024-39786Wavlink AC3000 nas.cgi add_dir functionality path traversal7.2NVD v3.12.5%2025-01-14
CVE-2024-39785Wavlink AC3000 nas.cgi add_dir functionality command execution7.2NVD v3.16.2%2025-01-14
CVE-2024-39784Wavlink AC3000 nas.cgi add_dir functionality command execution7.2NVD v3.16.2%2025-01-14
CVE-2024-39783Wavlink AC3000 adm.cgi sch_reboot functionality OS command injection7.2NVD v3.14.5%2025-01-14
CVE-2024-39782Wavlink AC3000 adm.cgi sch_reboot functionality OS command injection7.2NVD v3.13.7%2025-01-14
CVE-2024-39781Wavlink AC3000 adm.cgi sch_reboot functionality OS command injection7.2NVD v3.14.5%2025-01-14
CVE-2024-39774Wavlink AC3000 adm.cgi set_sys_adm functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-39773Wavlink AC3000 testsave.sh functionality information disclosure5.3CNA v3.10.8%2025-01-14
CVE-2024-39770Wavlink AC3000 internet.cgi set_qos functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-39769Wavlink AC3000 internet.cgi set_qos functionality buffer overflow7.2NVD v3.10.9%2025-01-14
CVE-2024-39768Wavlink AC3000 internet.cgi set_qos functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-39765Wavlink AC3000 internet.cgi set_add_routing functionality OS command injection7.2NVD v3.15.2%2025-01-14
CVE-2024-39764Wavlink AC3000 internet.cgi set_add_routing functionality OS command injection7.2NVD v3.14.2%2025-01-14
CVE-2024-39763Wavlink AC3000 internet.cgi set_add_routing functionality OS command injection7.2NVD v3.14.8%2025-01-14
CVE-2024-39762Wavlink AC3000 internet.cgi set_add_routing functionality OS command injection7.2NVD v3.15.9%2025-01-14
CVE-2024-39761Wavlink AC3000 login.cgi set_sys_init functionality OS command injection9.8v3.18.2%2025-01-14
CVE-2024-39760Wavlink AC3000 login.cgi set_sys_init functionality OS command injection9.8v3.117.4%2025-01-14
CVE-2024-39759Wavlink AC3000 login.cgi set_sys_init functionality OS command injection9.8v3.18.2%2025-01-14
CVE-2024-39757Wavlink AC3000 wireless.cgi AddMac functionality stack-based buffer overflow7.2NVD v3.12.4%2025-01-14
CVE-2024-39756Wavlink AC3000 adm.cgi rep_as_router functionality buffer overflow7.2NVD v3.11.9%2025-01-14
CVE-2024-39754Wavlink AC3000 hidden functionality9.8v3.11.3%2025-01-14
CVE-2024-39608Wavlink AC3000 missing authentication9.8v3.11.4%2025-01-14
CVE-2024-39604Wavlink AC3000 update_filter_url.sh functionality command execution8.1NVD v3.11.9%2025-01-14
CVE-2024-39603Wavlink AC3000 stack-based buffer overflow7.2NVD v3.12.4%2025-01-14
CVE-2024-39602Wavlink AC3000 external control of a configuration setting9.1CNA v3.12.3%2025-01-14
CVE-2024-39370Wavlink AC3000 adm.cgi set_MeshAp functionality arbitrary code execution7.2NVD v3.12.2%2025-01-14
CVE-2024-39367Wavlink AC3000 OS command injection7.2NVD v3.18.2%2025-01-14
CVE-2024-39363Wavlink AC3000 cross-site scripting6.1NVD v3.148.1%2025-01-14
CVE-2024-39360Wavlink AC3000 nas.cgi remove_dir functionality OS command injection7.2NVD v3.111.7%2025-01-14
CVE-2024-39359Wavlink AC3000 wireless.cgi DeleteMac functionality stack-based buffer overflow7.2NVD v3.12.4%2025-01-14
CVE-2024-39358Wavlink AC3000 adm.cgi set_wzap functionality buffer overflow7.2NVD v3.11.9%2025-01-14
CVE-2024-39357Wavlink AC3000 wireless.cgi SetName functionality stack-based buffer overflow7.2NVD v3.12.4%2025-01-14
CVE-2024-39299Wavlink AC3000 qos.cgi qos_sta_settings functionality buffer overflow7.2NVD v3.11.5%2025-01-14
CVE-2024-39294Wavlink AC3000 adm.cgi set_wzdgw4G functionality buffer overflow7.2NVD v3.11.5%2025-01-14
CVE-2024-39288Wavlink AC3000 internet.cgi set_add_routing functionality buffer overflow7.2NVD v3.113.5%2025-01-14
CVE-2024-39280Wavlink AC3000 external control of a configuration setting9.1CNA v3.134.2%2025-01-14
CVE-2024-39273Wavlink AC3000 missing authentication8.1NVD v3.11.1%2025-01-14
CVE-2024-38666Wavlink AC3000 external control of a configuration setting9.1CNA v3.118.9%2025-01-14
CVE-2024-37357Wavlink AC3000 adm.cgi set_TR069 functionality buffer overflow7.2NVD v3.19.7%2025-01-14
CVE-2024-37186Wavlink AC3000 adm.cgi set_ledonoff functionality OS command injection7.2NVD v3.122.8%2025-01-14
CVE-2024-37184Wavlink AC3000 adm.cgi rep_as_bridge functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-36512Fortinet FortiManager path traversal7.0CNA v3.11.4%2025-01-14Fix
CVE-2024-36510Fortinet FortiClientEMS response discrepancy4.9CNA v3.10.7%2025-01-14Fix
CVE-2024-36506Fortinet FortiClientEMS improper verification of communication source3.5CNA v3.10.5%2025-01-14Fix
CVE-2024-36504Fortinet FortiOS out-of-bounds read6.2CNA v3.10.7%2025-01-14Fix
CVE-2024-36493Wavlink AC3000 wireless.cgi set_wifi_basic functionality stack-based buffer overflow7.2NVD v3.12.0%2025-01-14
CVE-2024-36295Wavlink AC3000 qos.cgi qos_sta functionality command execution7.2NVD v3.120.8%2025-01-14
CVE-2024-36290Wavlink AC3000 login.cgi Goto_chidx functionality buffer overflow9.8v3.11.4%2025-01-14
CVE-2024-36272Wavlink AC3000 usbip.cgi set_info functionality buffer overflow7.2NVD v3.11.3%2025-01-14
CVE-2024-36258Wavlink AC3000 stack-based buffer overflow9.8v3.112.4%2025-01-14
CVE-2024-35278Fortinet FortiPortal SQL injection4.1CNA v3.10.4%2025-01-14Fix
CVE-2024-35277Fortinet FortiManager missing authentication8.4CNA v3.10.7%2025-01-14Fix
CVE-2024-35276Fortinet FortiAnalyzer stack-based buffer overflow5.0CNA v3.10.4%2025-01-14Fix
CVE-2024-35275Fortinet FortiManager SQL injection6.5CNA v3.10.8%2025-01-14Fix
CVE-2024-35273Fortinet FortiManager out-of-bounds write7.0CNA v3.10.7%2025-01-14Fix
CVE-2024-34544Wavlink AC3000 wireless.cgi AddMac functionality command injection7.2NVD v3.18.5%2025-01-14
CVE-2024-34166Wavlink AC3000 OS command injection9.8v3.115.8%2025-01-14
CVE-2024-33503Fortinet FortiManager Cloud improper privilege management6.7CNA v3.10.2%2025-01-14Fix
CVE-2024-33502Fortinet FortiManager path traversal6.4CNA v3.11.3%2025-01-14Fix
CVE-2024-32115Fortinet FortiManager relative path traversal5.2CNA v3.11.1%2025-01-14Fix
CVE-2024-29980Phoenix SecureCore™ for Intel Kaby Lake Unsafe Handling of IHV UEFI variables4.6CNA v4.00.1%2025-01-14Fix
CVE-2024-29979Unsafe Handling of Phoenix UEFI variables4.6CNA v4.00.2%2025-01-14Fix
CVE-2024-27778Fortinet FortiSandbox OS command injection8.3CNA v3.10.6%2025-01-14Fix
CVE-2024-26012Fortinet FortiAP-S OS command injection6.3CNA v3.10.7%2025-01-14Fix
CVE-2024-23106Fortinet FortiClientEMS missing brute-force protection7.7CNA v3.11.0%2025-01-14Fix
CVE-2024-21797Wavlink AC3000 adm.cgi set_TR069 functionality command execution7.2NVD v3.120.8%2025-01-14
CVE-2024-21758Fortinet FortiWeb stack-based buffer overflow6.1CNA v3.10.2%2025-01-14Fix
CVE-2024-13323Booking Calendar WordPress plugin DOM-based stored cross-site scripting5.4v3.10.4%2025-01-14Fix
CVE-2024-13181Ivanti Avalanche path traversal7.3CNA v3.132.4%2025-01-14Fix
CVE-2024-13180Ivanti Avalanche path traversal7.5CNA v3.127.8%2025-01-14Fix
CVE-2024-13179Ivanti Avalanche path traversal7.3CNA v3.163.0%2025-01-14Fix
CVE-2024-13172Ivanti Endpoint Manager improper signature verification7.8CNA v3.10.5%2025-01-14Fix
CVE-2024-13171Ivanti Endpoint Manager unrestricted file upload7.8CNA v3.117.6%2025-01-14Fix
CVE-2024-13170Ivanti Endpoint Manager out-of-bounds write7.5CNA v3.12.7%2025-01-14Fix
CVE-2024-13169Ivanti Endpoint Manager out-of-bounds read7.8CNA v3.10.4%2025-01-14Fix
CVE-2024-13168Ivanti Endpoint Manager out-of-bounds write7.5CNA v3.12.6%2025-01-14Fix
CVE-2024-13167Ivanti Endpoint Manager out-of-bounds write7.5CNA v3.12.6%2025-01-14Fix
CVE-2024-13166Ivanti Endpoint Manager out-of-bounds write7.5CNA v3.12.4%2025-01-14Fix
CVE-2024-13165Ivanti Endpoint Manager out-of-bounds write7.5CNA v3.12.6%2025-01-14Fix
CVE-2024-13164Ivanti Endpoint Manager uninitialized resource use7.8CNA v3.10.4%2025-01-14Fix
CVE-2024-13163Ivanti Endpoint Manager deserialization of untrusted data7.8CNA v3.19.2%2025-01-14Fix
CVE-2024-13162Ivanti Endpoint Manager SQL injection7.2CNA v3.164.2%2025-01-14Fix
CVE-2024-13161Ivanti Endpoint Manager (EPM) absolute path traversal9.8CNA v3.190.1%2025-01-14KEVNucleiFix
CVE-2024-13160Ivanti Endpoint Manager (EPM) absolute path traversal9.8CNA v3.191.2%2025-01-14KEVNucleiFix
CVE-2024-13159Ivanti Endpoint Manager (EPM) absolute path traversal9.8CNA v3.1100.0%2025-01-14KEVNucleiEmerging ThreatsExploit codeFix
CVE-2024-13158Ivanti Endpoint Manager path traversal7.2CNA v3.13.5%2025-01-14Fix
CVE-2024-13156HTML5 Video Player WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-01-14Fix
CVE-2024-12919Paid Membership Subscriptions WordPress plugin authentication bypass9.8CNA v3.10.6%2025-01-14Fix
CVE-2024-12747Red Hat Enterprise Linux 10 rsync: Race condition in rsync handling symbolic links5.6CNA v3.10.4%2025-01-14Fix
CVE-2024-12398Zyxel WBE530 firmware web management interface of the Zyxel improper privilege management8.8CNA v3.10.5%2025-01-14Fix
CVE-2024-12365W3 Total Cache WordPress plugin missing authorization server-side request forgery8.5CNA v3.11.8%2025-01-14Fix
CVE-2024-12298Vulnerability Report on improper restriction of XML external entity reference in NB-Designer5.5CNA v3.10.2%2025-01-14
CVE-2024-12240Page Builder by SiteOrigin WordPress plugin stored cross-site scripting5.4v3.10.3%2025-01-14Fix
CVE-2024-12088Rsync: --safe-links option bypass leads to path traversal7.5NVD v3.14.6%2025-01-14Fix
CVE-2024-12087Rsync: Path traversal vulnerability in rsync7.5NVD v3.12.3%2025-01-14Fix
CVE-2024-12086Rsync: Rsync server leaks arbitrary client files6.8NVD v3.11.8%2025-01-14Fix
CVE-2024-12085Rsync: Info leak via uninitialized stack contents7.5CNA v3.18.8%2025-01-14Exploit codeKCVFix
CVE-2024-12083Path traversal vulnerabilities in NJ/NX-series Machine Automation Controllers6.6CNA v3.10.7%2025-01-14
CVE-2024-12008W3 Total Cache information exposure via Log files7.5v3.12.3%2025-01-14NucleiExploit codeFix
CVE-2024-12006W3 Total Cache WordPress plugin unauthorized access5.3CNA v3.10.5%2025-01-14Fix
CVE-2024-11864Arm SCP-Firmware SCMI message handler vulnerability7.5CISA ADP v3.10.5%2025-01-14Fix
CVE-2024-11863Arm SCP-Firmware SCMI message handler vulnerability5.3CISA ADP v3.10.4%2025-01-14Fix
CVE-2024-11736Keycloak allows unrestricted admin use of system and environment variables4.9CNA v3.10.8%2025-01-14Fix
CVE-2024-11734Org.keycloak:keycloak-quarkus-server: Denial of service in keycloak server via security headers6.5CNA v3.11.0%2025-01-14Fix
CVE-2024-11497Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation8.8CNA v3.10.4%2025-01-14Fix
CVE-2024-11396Event monster WordPress plugin information exposure via Visitors List export5.3CNA v3.12.1%2025-01-14NucleiFix
CVE-2024-10811Ivanti Endpoint Manager absolute path traversal9.8CNA v3.13.6%2025-01-14Fix
CVE-2024-10630Ivanti Application Control Engine race condition7.8CNA v3.10.2%2025-01-14Fix
CVE-2024-10254Lenovo PC Manager heap-based buffer overflow4.7CNA v3.10.1%2025-01-14Fix
CVE-2024-10253Lenovo PC Manager heap-based buffer overflow4.7CNA v3.10.1%2025-01-14Fix
CVE-2024-7344Radix SmartRecovery improper signature verification8.2NVD v3.11.1%2025-01-14Exploit codeFix
CVE-2024-57811Eaton X303 hard-coded credentials9.1CISA ADP v3.10.4%2025-01-13
CVE-2024-57488code-projects Online Car Rental System cross-site scripting6.5CISA ADP v3.10.4%2025-01-13
CVE-2024-57487code-projects Online Car Rental System code injection6.5CISA ADP v3.12.5%2025-01-13MetasploitExploit code
CVE-2024-56323OpenFGA authorization bypass5.8CNA v4.00.4%2025-01-13Fix
CVE-2024-56301Distance Based Shipping Calculator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13Fix
CVE-2024-56138Notation-go's timestamp signature generation lacks certificate revocation check4.0CNA v3.10.1%2025-01-13Fix
CVE-2024-56065WP2LEADS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-01-13Fix
CVE-2024-54999Monicahq Monica code injection6.5CISA ADP v3.10.4%2025-01-13
CVE-2024-52938GPU DDK rgxfw_pm_add_freelist_for_reconstruction OOB write7.8CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-52937GPU DDK rgxfw_kernel_CMD_DISABLE_ZSSTORE OOB write via ui32WriteOffsetOfDisableZSStore6.7CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-52936GPU DDK rgxfw_hwperf_config OOB read and write4.4CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-52935Imagination Technologies Graphics DDK GPU firmware shared memory out-of-bounds write4.1CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-52333OFFIS DCMTK determineMinMax functionality improper array index validation7.8v3.10.6%2025-01-13Fix
CVE-2024-51491notation-go has an OS error when setting CRL cache leads to denial of signature verification3.3CNA v3.10.2%2025-01-13Fix
CVE-2024-48883Samsung Exynos 9820 insecure storage of sensitive information4.3CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-47897GPU DDK PVRSRVRGXGetEnabledHWPerfBlocksKM off-by-one OOB write8.8CISA ADP v3.10.6%2025-01-13Fix
CVE-2024-47895GPU DDK OOB read into fwlog due to unchecked block count7.1CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-47894GPU DDK out-of-bounds read into fwlog due to unchecked loop bounds7.1CISA ADP v3.10.2%2025-01-13Fix
CVE-2024-47796OFFIS DCMTK nowindow functionality improper array index validation7.8v3.10.6%2025-01-13Fix
CVE-2024-46921Samsung Exynos 9820 resource exhaustion6.5CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-46920Samsung Exynos 9820 out-of-bounds write6.5CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-46919Samsung Exynos 9820 out-of-bounds write5.3CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-46481Venki Supravizio BPM open redirect6.1NVD v3.10.3%2025-01-13
CVE-2024-46480Venki Supravizio BPM information disclosure7.2v3.10.5%2025-01-13
CVE-2024-46479Venki Supravizio BPM unrestricted file upload8.8NVD v3.10.8%2025-01-13
CVE-2024-46310Cfx.re FXServer API endpoint improper access control9.1CISA ADP v3.12.5%2025-01-13Nuclei
CVE-2024-44771BigID PrivacyPortal Report template cross-site scripting6.1CISA ADP v3.10.2%2025-01-13
CVE-2024-12568Email Subscribers WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-12567Email Subscribers WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-12566Email Subscribers WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-12274codepeople Appointment Booking Calendar export settings vulnerability7.5CISA ADP v3.10.6%2025-01-13Fix
CVE-2024-12211Pegasystems Pega Infinity cross-site scripting5.4CNA v3.10.3%2025-01-13Fix
CVE-2024-11636Email Subscribers WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-01-13Fix
CVE-2024-11128Insufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS8.4CNA v4.00.2%2025-01-13Fix
CVE-2024-6352silabs.com SiSDK malformed packet leads to denial of service in APS layer4.3CNA v3.10.2%2025-01-13Fix
CVE-2024-5743EveHome Eve Play command injection9.8CNA v3.10.4%2025-01-13
CVE-2024-51456IBM Robotic Process Automation information disclosure5.9CNA v3.10.3%2025-01-12Fix
CVE-2024-49785IBM watsonx.ai cross-site scripting5.4CNA v3.10.2%2025-01-12Fix
CVE-2024-42181HCL MyXalytics is affected by a cleartext transmission of sensitive information1.6CNA v3.10.2%2025-01-12Fix
CVE-2024-42180HCL MyXalytics is affected by a malicious file upload1.6CNA v3.10.3%2025-01-12Fix
CVE-2024-42179HCL MyXalytics is affected by sensitive information disclosure2.0CNA v3.10.2%2025-01-12Fix
CVE-2024-57881Linux kernel page allocator buddy splitting null pointer dereference5.5v3.10.2%2025-01-11Fix
CVE-2024-57880In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array The code uses the initialised member of the asoc_sdw_dailink struct to determine if a member of the array is in use. However in the case the array is completely full5.5v3.10.2%2025-01-11Fix
CVE-2024-57879Linux kernel Bluetooth ISO socket handling improper resource release5.5v3.10.2%2025-01-11Fix
CVE-2024-57878Linux kernel arm64 ptrace FPMR regset vulnerability6.1v3.10.2%2025-01-11Fix
CVE-2024-57877Linux kernel arm64 ptrace POE regset vulnerability6.1v3.10.2%2025-01-11Fix
CVE-2024-57876Linux kernel drm/dp_mst memory corruption7.0v3.10.2%2025-01-11Fix
CVE-2024-57875Linux kernel block device zoned storage bitmap use-after-free7.8CNA v3.10.2%2025-01-11Fix
CVE-2024-57874Linux kernel arm64 ptrace tagged address control regset vulnerability6.1v3.10.2%2025-01-11Fix
CVE-2024-57872Linux kernel UFS platform driver memory leak5.5v3.10.2%2025-01-11Fix
CVE-2024-57850Linux kernel JFFS2 rtime decompression out-of-bounds write7.8CNA v3.10.3%2025-01-11Fix
CVE-2024-57849Linux kernel s390/cpum_sf use-after-free7.8CNA v3.10.2%2025-01-11Fix
CVE-2024-57843Linux kernel virtio-net receive queue allocation integer underflow9.8CNA v3.10.4%2025-01-11Fix
CVE-2024-57839Linux kernel page cache readahead denial of service5.5v3.10.2%2025-01-11Fix
CVE-2024-57838Linux kernel s390 IRQ entry handling vulnerability7.1v3.10.2%2025-01-11Fix
CVE-2024-57809Linux kernel i.MX6 PCIe driver denial of service5.5NVD v3.10.2%2025-01-11Fix
CVE-2024-57807Linux kernel megaraid_sas driver deadlock5.5v3.10.2%2025-01-11Fix
CVE-2024-57806Linux kernel Btrfs quota reachable assertion5.5v3.10.2%2025-01-11Fix
CVE-2024-57805Linux kernel SOF Intel HDA driver vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-57804Linux kernel mpi3mr SCSI driver vulnerability7.3CNA v3.10.2%2025-01-11Fix
CVE-2024-57800In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dma_mapping_error() over explicit address checking With CONFIG_DMA_API_DEBUG enabled, the following warning is observed: DMA-API: snd_hda_intel 0000:03:00.1: device driver failed to check map error[device a5.5v3.10.2%2025-01-11Fix
CVE-2024-57799Linux kernel samsung-hdptx null pointer dereference5.5v3.10.2%2025-01-11Fix
CVE-2024-57798Linux kernel drm/dp_mst use-after-free7.8v3.10.2%2025-01-11Fix
CVE-2024-57793Linux kernel TDX guest driver memory leak9.3CNA v3.10.2%2025-01-11Fix
CVE-2024-57792Linux kernel GPIO charger driver vulnerability7.3CNA v3.10.3%2025-01-11Fix
CVE-2024-57791Linux kernel SMC protocol vulnerability7.5CNA v3.10.8%2025-01-11Fix
CVE-2024-56788Linux kernel oa_tc6 Ethernet driver race condition7.5CNA v3.10.2%2025-01-11Fix
CVE-2024-56372Linux kernel tun crash5.5v3.10.2%2025-01-11Fix
CVE-2024-56369Linux kernel DRM mode refresh calculation divide by zero5.5v3.10.2%2025-01-11Fix
CVE-2024-56368Linux kernel ring buffer memory mapping integer overflow7.1CNA v3.10.2%2025-01-11Fix
CVE-2024-55916Linux kernel Hyper-V util driver null pointer dereference5.5v3.10.2%2025-01-11Fix
CVE-2024-55881Linux kernel KVM x86 hypercall completion vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-55642Linux kernel zone write plug error recovery deadlock5.5v3.10.2%2025-01-11Fix
CVE-2024-55641Linux kernel XFS directory transaction allocation vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-55639Linux kernel rswitch Ethernet driver vulnerability8.4CNA v3.10.2%2025-01-11Fix
CVE-2024-54683Linux kernel netfilter IDLETIMER target deadlock5.5v3.10.2%2025-01-11Fix
CVE-2024-54460Linux kernel Bluetooth ISO socket deadlock5.5v3.10.1%2025-01-11Fix
CVE-2024-54455Linux kernel ivpu accelerator driver vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-54193In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal() Move pm_runtime_set_active() to ivpu_pm_init() so when ivpu_ipc_send_receive_internal() is executed before ivpu_pm_enable() it already has correct runtime state, even if las5.5v3.10.2%2025-01-11Fix
CVE-2024-54191Linux kernel Bluetooth ISO socket handling vulnerability5.5v3.10.1%2025-01-11Fix
CVE-2024-53690Linux kernel NILFS2 filesystem vulnerability5.5v3.10.3%2025-01-11Fix
CVE-2024-53687Linux kernel KFENCE page protection vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-53685Linux kernel Ceph client infinite loop5.5v3.10.2%2025-01-11Fix
CVE-2024-53682Linux kernel AXP717 regulator driver denial of service5.5v3.10.2%2025-01-11Fix
CVE-2024-53680Linux kernel IPVS protocol initialization vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-52332Linux kernel igb Ethernet driver out-of-bounds read7.1NVD v3.10.3%2025-01-11Fix
CVE-2024-52319Linux kernel hugetlb page zeroing out-of-bounds write7.8CNA v3.10.2%2025-01-11Fix
CVE-2024-51729Linux kernel hugetlb gigantic page copy out-of-bounds write7.8CNA v3.10.2%2025-01-11Fix
CVE-2024-50051Linux kernel MPC52xx SPI driver use-after-free7.8v3.10.2%2025-01-11Fix
CVE-2024-49573In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix NEXT_BUDDY Adam reports that enabling NEXT_BUDDY insta triggers a WARN in pick_next_entity(). Moving clear_buddies() up before the delayed dequeue bits ensures no ->next buddy becomes delayed. Further ensure no ne7.0CNA v3.10.2%2025-01-11Fix
CVE-2024-49571Linux kernel SMC proposal message parsing vulnerability9.1CNA v3.10.6%2025-01-11Fix
CVE-2024-49569Linux kernel NVMe over RDMA admin queue teardown vulnerability7.5CNA v3.10.8%2025-01-11Fix
CVE-2024-49568Linux kernel SMC proposal message parsing vulnerability9.8CNA v3.10.6%2025-01-11Fix
CVE-2024-48881Linux kernel bcache null pointer dereference5.5NVD v3.10.3%2025-01-11Fix
CVE-2024-48876Linux kernel stack depot deadlock5.5v3.10.1%2025-01-11Fix
CVE-2024-48875Linux kernel Btrfs device replace vulnerability5.5v3.10.1%2025-01-11Fix
CVE-2024-48873Linux kernel rtw89 Wi-Fi driver null pointer dereference5.5v3.10.2%2025-01-11Fix
CVE-2024-47809Linux kernel DLM lock request handling null pointer dereference5.5NVD v3.10.2%2025-01-11Fix
CVE-2024-47794Linux kernel BPF tail call extension replacement infinite loop7.8CNA v3.10.2%2025-01-11Fix
CVE-2024-47408Linux kernel SMC-D protocol vulnerability9.8CNA v3.10.6%2025-01-11Fix
CVE-2024-47143Linux kernel DMA debug subsystem deadlock5.5v3.10.2%2025-01-11Fix
CVE-2024-47141Linux kernel pinmux subsystem vulnerability5.5v3.10.2%2025-01-11Fix
CVE-2024-46896Linux kernel drm/amdgpu crash5.5v3.10.2%2025-01-11Fix
CVE-2024-45828Linux kernel i3c MIPI I3C HCI driver null pointer dereference5.5v3.10.3%2025-01-11Fix
CVE-2024-43098Linux kernel i3c subsystem deadlock5.5v3.10.2%2025-01-11Fix
CVE-2024-42175HCL MyXalytics is affected by a weak input validation vulnerability2.6CNA v3.10.3%2025-01-11Fix
CVE-2024-42174HCL Software DRYiCE MyXalytics response discrepancy3.7CNA v3.10.3%2025-01-11Fix
CVE-2024-42173HCL MyXalytics is affected by an improper password policy implementation vulnerability4.8CNA v3.10.2%2025-01-11Fix
CVE-2024-42172HCL MyXalytics is affected by broken authentication5.3CNA v3.10.4%2025-01-11Fix
CVE-2024-42171HCL MyXalytics is affected by insufficient session expiration6.4CNA v3.10.2%2025-01-11Fix
CVE-2024-42170HCL MyXalytics is affected by a session fixation6.8CNA v3.10.3%2025-01-11Fix
CVE-2024-42169HCL MyXalytics is affected by insecure direct object references7.1CNA v3.10.3%2025-01-11Fix
CVE-2024-42168HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability8.9CNA v3.10.4%2025-01-11Fix
CVE-2024-41935Linux kernel f2fs extent tree shrinker denial of service7.1v3.10.2%2025-01-11Fix
CVE-2024-41932Linux kernel CPU affinity scheduler race condition5.5NVD v3.10.2%2025-01-11Fix
CVE-2024-41149Linux kernel block layer hctx cpuhp callback use-after-free7.8CNA v3.10.2%2025-01-11Fix
CVE-2024-12877GiveWP WordPress plugin PHP object injection9.8CNA v3.11.3%2025-01-11Exploit codeFix
CVE-2024-12627Coupon X: Discount Pop Up WordPress plugin PHP object injection7.5CNA v3.10.5%2025-01-11Fix
CVE-2024-12587Contact Form Master WordPress plugin reflected XSS6.1CISA ADP v3.10.4%2025-01-11
CVE-2024-12527Perfect Portal Widgets WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11Fix
CVE-2024-12520Dominion Domain Checker for WPBakery WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-01-11
CVE-2024-12519TCBD Auto Refresher WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11
CVE-2024-12505Trackserver WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11Fix
CVE-2024-12472Post Duplicator WordPress plugin authenticated (Contributor+) Protected post disclosure4.3CNA v3.10.3%2025-01-11Fix
CVE-2024-12412Rental and Booking Manager for Bike WordPress plugin stored cross-site scripting6.1CNA v3.10.4%2025-01-11Fix
CVE-2024-12407Push Notification for Post and BuddyPress WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-01-11Fix
CVE-2024-12404CF Internal Link Shortcode WordPress plugin unauthenticated SQL injection7.5CNA v3.10.8%2025-01-11Exploit code
CVE-2024-12304Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting5.4v3.10.2%2025-01-11Fix
CVE-2024-12204Coupon X: Discount Pop Up WordPress plugin unauthorized access5.4CNA v3.10.2%2025-01-11Fix
CVE-2024-12116Unlimited Theme Addon For Elementor and WooCommerce WordPress plugin post disclosure4.3CNA v3.10.4%2025-01-11Fix
CVE-2024-11915RRAddons for Elementor WordPress plugin authenticated (Contributor+) post disclosure4.3CNA v3.10.3%2025-01-11
CVE-2024-11892Accordion Slider Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11
CVE-2024-11874Grid Accordion Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11
CVE-2024-11758WP SPID Italia WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11Fix
CVE-2024-11386GatorMail SmartForms WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-01-11Fix
CVE-2024-11327ClickWhale WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2025-01-11Fix
CVE-2024-57823librdf Raptor RDF Syntax Library integer underflow5.5NVD v3.10.3%2025-01-10Fix
CVE-2024-57822librdf Raptor RDF Syntax Library out-of-bounds read5.5v3.10.3%2025-01-10Fix
CVE-2024-57687PHPGurukul Land Record System OS command injection9.8CISA ADP v3.12.6%2025-01-10
CVE-2024-57686PHPGurukul Land Record System cross-site scripting9.8CISA ADP v3.11.6%2025-01-10
CVE-2024-57228Linksys E7350 command injection8.0CISA ADP v3.11.2%2025-01-10
CVE-2024-57227Linksys E7350 command injection8.0CISA ADP v3.11.2%2025-01-10
CVE-2024-57226Linksys E7350 command injection8.0CISA ADP v3.11.2%2025-01-10
CVE-2024-57225Linksys E7350 command injection9.8CISA ADP v3.11.7%2025-01-10
CVE-2024-57224Linksys E7350 command injection9.8CISA ADP v3.11.7%2025-01-10
CVE-2024-57223Linksys E7350 command injection9.8CISA ADP v3.11.7%2025-01-10
CVE-2024-57222Linksys E7350 command injection6.3CISA ADP v3.10.8%2025-01-10
CVE-2024-57214TOTOLINK A6000R command injection6.3CISA ADP v3.10.7%2025-01-10
CVE-2024-57213TOTOLINK A6000R command injection6.3CISA ADP v3.10.7%2025-01-10
CVE-2024-57212TOTOLINK A6000R command injection5.1CISA ADP v3.10.8%2025-01-10
CVE-2024-57211TOTOLINK A6000R command injection8.0CISA ADP v3.11.2%2025-01-10
CVE-2024-56511DataEase TokenFilter authentication filter authentication bypass9.3CNA v4.050.3%2025-01-10NucleiKCVFix
CVE-2024-54998Monicahq Monica cross-site scripting5.4CISA ADP v3.10.4%2025-01-10
CVE-2024-54997Monicahq Monica code injection5.4CISA ADP v3.10.3%2025-01-10
CVE-2024-54996Monicahq Monica cross-site scripting8.8CISA ADP v3.10.8%2025-01-10
CVE-2024-54994Monicahq Monica cross-site scripting6.5CISA ADP v3.10.3%2025-01-10
CVE-2024-54910Hasleo Backup Suite Free file recovery function incorrect permission assignment4.7CISA ADP v3.10.4%2025-01-10Exploit code
CVE-2024-54849Cpplusworld Cp-vnr-3104 improper certificate validation5.9CISA ADP v3.10.4%2025-01-10
CVE-2024-54848Cpplusworld Cp-vnr-3104 improper certificate validation7.4CISA ADP v3.10.3%2025-01-10
CVE-2024-54847Cpplusworld Cp-vnr-3104 improper certificate validation5.9CISA ADP v3.10.5%2025-01-10
CVE-2024-54846Cpplusworld Cp-vnr-3104 improper certificate validation5.9CISA ADP v3.10.5%2025-01-10