CVE-2024 records published after 2024
Page six of six: records 5,001 to 5,832 of the 5,832 published after 2024, newest first. The first page carries the figures for After 2024.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2024-54687 | Vtiger CRM cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-01-10 | |
| CVE-2024-50807 | Trippo Responsive Filemanager file upload cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-01-10 | |
| CVE-2024-47520 | NG Firewall report application access controls vulnerability | 7.6CNA v3.1 | 0.4% | 2025-01-10 | Fix |
| CVE-2024-47519 | Arista Edge Threat Management backup uploads to ETM subject to man-in-the-middle interception | 8.3CNA v3.1 | 0.3% | 2025-01-10 | Fix |
| CVE-2024-47518 | NG Firewall remote access session queries vulnerability | 6.4CNA v3.1 | 0.4% | 2025-01-10 | |
| CVE-2024-47517 | NG Firewall administrator authentication tokens vulnerability | 6.8CNA v3.1 | 0.4% | 2025-01-10 | |
| CVE-2024-46210 | redaxo MediaPool module arbitrary file upload | 7.2CISA ADP v3.1 | 0.6% | 2025-01-10 | |
| CVE-2024-41787 | IBM Engineering Requirements Management DOORS Next code execution | 9.8CNA v3.1 | 1.1% | 2025-01-10 | Fix |
| CVE-2024-33299 | Microweber cross-site scripting | 4.7CISA ADP v3.1 | 1.1% | 2025-01-10 | Exploit code |
| CVE-2024-33298 | Microweber cross-site scripting | 6.1CISA ADP v3.1 | 0.9% | 2025-01-10 | Exploit code |
| CVE-2024-33297 | Microweber cross-site scripting | 4.7CISA ADP v3.1 | 1.1% | 2025-01-10 | Exploit code |
| CVE-2024-29971 | Scontain SCONE signal handling interface vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2025-01-10 | |
| CVE-2024-29970 | Fortanix Enclave OS signal handling interface vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2025-01-10 | |
| CVE-2024-25371 | Gramine signal and exception handling interface vulnerability | 7.5CISA ADP v3.1 | 0.6% | 2025-01-10 | |
| CVE-2024-13318 | Essential WP Real Estate WordPress plugin missing authorization to arbitrary Post/Page deletion | 5.3CNA v3.1 | 0.3% | 2025-01-10 | |
| CVE-2024-13183 | Orbit Fox by ThemeIsle WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2025-01-10 | Fix |
| CVE-2024-12847 | NETGEAR DGN setup.cgi OS command injection | 9.8CNA v3.1 | 29.9% | 2025-01-10 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2024-12606 | AI Scribe WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-10 | Fix |
| CVE-2024-12473 | AI Scribe WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2025-01-10 | Fix |
| CVE-2024-9188 | NG Firewall cross-site scripting | 8.8CNA v3.1 | 0.5% | 2025-01-10 | Fix |
| CVE-2024-9134 | Arista Edge Threat Management reporting application SQL injection | 8.3CNA v3.1 | 0.6% | 2025-01-10 | |
| CVE-2024-9133 | NG Firewall improper authentication | 6.6CNA v3.1 | 0.2% | 2025-01-10 | Fix |
| CVE-2024-9132 | NG Firewall captive portal script code injection | 8.1CNA v3.1 | 0.7% | 2025-01-10 | Fix |
| CVE-2024-9131 | Arista Edge Threat Management A user with administrator privileges can perform command injection | 7.2CNA v3.1 | 1.4% | 2025-01-10 | Fix |
| CVE-2024-7142 | Arista CloudVision Appliance disk encryption missing encryption | 4.6CNA v3.1 | 0.1% | 2025-01-10 | |
| CVE-2024-7095 | Arista EOS snmpd process memory leak | 4.3CNA v3.1 | 0.5% | 2025-01-10 | |
| CVE-2024-6880 | Jan Syski MegaBIP registered.php information disclosure | 6.9CNA v4.0 | 0.5% | 2025-01-10 | Fix |
| CVE-2024-6662 | Jan Syski MegaBIP account management form cross-site request forgery | 8.7CNA v4.0 | 0.3% | 2025-01-10 | Fix |
| CVE-2024-6437 | Arista EOS policy-based routing vulnerability | 5.8CNA v3.1 | 0.5% | 2025-01-10 | |
| CVE-2024-5872 | Arista EOS control plane packet handling vulnerability | 6.5CNA v3.1 | 0.3% | 2025-01-10 | |
| CVE-2024-56827 | Red Hat Enterprise Linux 9 openjpeg: Heap buffer overflow in lib/openjp2/j2k.c | 5.6CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-56826 | Red Hat Enterprise Linux 9 openjpeg: Heap buffer overflow in bin/common/color.c | 5.6CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-56377 | Vanderbilt REDCap survey titles stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-56376 | Vanderbilt REDCap built-in messenger stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-56114 | Henkel Canlineapp incorrect authorization | 6.5CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-56113 | Motius Smart Toilet Lab Django error page information disclosure | 7.5CISA ADP v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-55494 | Opencode Mobile Collect Call /occontrolpanel/index.php cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-55226 | Vaultwarden authenticated reflected cross-site scripting (XSS) | 5.4CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-55225 | dani-garcia vaultwarden incorrect default permissions | 9.8CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-55224 | Vaultwarden HTML injection | 9.6CISA ADP v3.1 | 0.8% | 2025-01-09 | Fix |
| CVE-2024-54887 | TP-Link TL-WR940N buffer overflow | 8.0CISA ADP v3.1 | 6.6% | 2025-01-09 | Emerging ThreatsExploit code |
| CVE-2024-54762 | RuoYi filterKeyword method SQL injection | 6.3CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-54761 | BigAntSoft Bigant Office Messenger 5 SQL injection | 6.3CISA ADP v3.1 | 1.8% | 2025-01-09 | Exploit code |
| CVE-2024-54724 | PHPYun file upload and inclusion function code injection | 9.8CISA ADP v3.1 | 0.6% | 2025-01-09 | |
| CVE-2024-53706 | SonicWall SonicOS improper privilege management | 7.8CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-53705 | SonicWall SonicOS server-side request forgery | 7.5CISA ADP v3.1 | 0.7% | 2025-01-09 | Fix |
| CVE-2024-53704 | SonicWall SonicOS SSLVPN improper authentication | 9.8v3.1 | 95.1% | 2025-01-09 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-51229 | pb-cms LinZhaoguan cross-site scripting | 8.8CISA ADP v3.1 | 0.8% | 2025-01-09 | |
| CVE-2024-48806 | Neat Board NFC v.1.20240620.0015 buffer overflow | 6.8CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-46505 | Infoblox BloxOne thick client hard-coded credentials | 9.1CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-46464 | PRIMX ZED Enterprise incorrect default permissions | 7.8CISA ADP v3.1 | 0.2% | 2025-01-09 | |
| CVE-2024-43663 | Iocharger firmware for AC models buffer overflow vulnerabilities in CGI scripts lead to segfault | 9.8CISA ADP v3.1 | 1.0% | 2025-01-09 | Fix |
| CVE-2024-43662 | Iocharger firmware for AC models authenticated arbitrary file upload to /tmp/ and /tmp/upload/ | 5.3CNA v4.0 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-43661 | Iocharger firmware for AC models certificate deletion handler buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-43660 | Iocharger firmware for AC models information disclosure | 7.5CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-43659 | Plaintext default credentials in firmware | 7.2CISA ADP v3.1 | 0.8% | 2025-01-09 | Fix |
| CVE-2024-43658 | Iocharger firmware for AC models path traversal | 7.2CNA v4.0 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-43657 | Iocharger firmware for AC models command improper neutralization | 8.8CISA ADP v3.1 | 1.5% | 2025-01-09 | Fix |
| CVE-2024-43656 | Iocharger firmware for AC models command improper neutralization | 8.8CISA ADP v3.1 | 1.5% | 2025-01-09 | Fix |
| CVE-2024-43655 | Iocharger firmware for AC models command improper neutralization | 9.3CNA v4.0 | 1.2% | 2025-01-09 | Fix |
| CVE-2024-43654 | Iocharger firmware for AC models command improper neutralization | 8.8CISA ADP v3.1 | 2.1% | 2025-01-09 | Fix |
| CVE-2024-43653 | Iocharger firmware for AC models command improper neutralization | 8.8CISA ADP v3.1 | 2.1% | 2025-01-09 | Fix |
| CVE-2024-43652 | Iocharger firmware for AC chargers command improper neutralization | 8.8CISA ADP v3.1 | 1.9% | 2025-01-09 | Fix |
| CVE-2024-43651 | Iocharger firmware for AC models command improper neutralization | 9.3CNA v4.0 | 1.7% | 2025-01-09 | Fix |
| CVE-2024-43650 | Iocharger firmware for AC models command improper neutralization | 9.3CNA v4.0 | 1.6% | 2025-01-09 | Fix |
| CVE-2024-43649 | Iocharger firmware for AC models authenticated command injection | 8.8CISA ADP v3.1 | 1.8% | 2025-01-09 | Fix |
| CVE-2024-43648 | Iocharger firmware for AC models authenticated command injection | 8.8CISA ADP v3.1 | 1.8% | 2025-01-09 | Fix |
| CVE-2024-43176 | IBM OpenPages information disclosure | 5.4CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-42898 | Nagios XI cross-site scripting | 5.4CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-40765 | SonicWall SonicOS Integer-based buffer overflow | 9.8CISA ADP v3.1 | 0.8% | 2025-01-09 | Fix |
| CVE-2024-40762 | SonicWall SonicOS weak random number generator | 9.8CISA ADP v3.1 | 1.0% | 2025-01-09 | Fix |
| CVE-2024-37372 | Node.js Node path traversal | 3.6CNA v3.0 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-27980 | Node.js Node command injection | 8.1CNA v3.0 | 1.4% | 2025-01-09 | Fix |
| CVE-2024-13312 | Open Social Moderately critical Access bypass SA-CONTRIB-2024-076 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13311 | Allow All File Extensions for file fields Critical Unsupported SA-CONTRIB-2024-075 | 7.3CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-13310 | Git Utilities for Drupal Critical Unsupported SA-CONTRIB-2024-074 | 6.5CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13309 | Login Disable Critical Access bypass SA-CONTRIB-2024-073 | 5.4CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13308 | Browser Back Button Moderately critical cross-site scripting SA-CONTRIB-2024-072 | 3.8CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13305 | Entity Form Steps Moderately critical cross-site scripting SA-CONTRIB-2024-071 | 4.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13304 | Minify JS Moderately critical cross-site request forgery SA-CONTRIB-2024-070 | 4.5CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13303 | Download All Files Critical Access bypass SA-CONTRIB-2024-069 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13302 | Pages Restriction Access Critical Access bypass SA-CONTRIB-2024-068 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13301 | OAuth and OpenID Connect Single Sign On SSO Critical cross-site scripting SA-CONTRIB-2024-067 | 6.1CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13300 | Print Anything Critical Unsupported SA-CONTRIB-2024-066 | 6.6CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13299 | Megamenu Framework Critical Unsupported SA-CONTRIB-2024-065 | 6.6CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13298 | Tarte au Citron Moderately critical cross-site scripting SA-CONTRIB-2024-064 | 4.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13297 | Eloqua Moderately critical Arbitrary PHP code execution SA-CONTRIB-2024-063 | 6.6CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13296 | Mailjet Moderately critical Arbitrary PHP code execution SA-CONTRIB-2024-062 | 6.6CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13295 | Node export Moderately critical Arbitrary PHP code execution SA-CONTRIB-2024-061 | 6.6CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13294 | POST File Critical cross-site scripting, arbitrary PHP code execution SA-CONTRIB-2024-060 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13293 | POST File Moderately critical cross-site request forgery SA-CONTRIB-2024-059 | 3.1CISA ADP v3.1 | 0.1% | 2025-01-09 | Fix |
| CVE-2024-13292 | Tooltip Moderately critical cross-site scripting SA-CONTRIB-2024-058 | 4.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13291 | Basic HTTP Authentication Critical Access bypass SA-CONTRIB-2024-057 | 7.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13290 | OhDear Integration Moderately critical Access bypass SA-CONTRIB-2024-056 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13289 | Cookiebot + GTM Moderately critical cross-site scripting SA-CONTRIB-2024-055 | 5.4CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13288 | Monster Menus Critical arbitrary PHP code execution SA-CONTRIB-2024-052 | 4.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13287 | Views SVG Animation Moderately critical cross-site scripting SA-CONTRIB-2024-051 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13286 | SVG Embed Moderately critical cross-site scripting SA-CONTRIB-2024-050 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13285 | Wkhtmltopdf Highly critical Unsupported SA-CONTRIB-2024-049 | 9.8CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13284 | Gutenberg Moderately critical cross-site request forgery SA-CONTRIB-2024-048 | 8.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13283 | Facets Critical cross-site scripting SA-CONTRIB-2024-047 | 6.1CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13282 | Block permissions Moderately critical Access bypass SA-CONTRIB-2024-046 | 8.8CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13281 | Monster Menus Moderately critical Access bypass, information disclosure SA-CONTRIB-2024-045 | 9.1CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13280 | Persistent Login Moderately critical Access bypass SA-CONTRIB-2024-044 | 9.8CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13279 | Two-factor Authentication (TFA) Critical Access bypass SA-CONTRIB-2024-043 | 9.8CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-13278 | Diff Moderately critical Access bypass, information disclosure SA-CONTRIB-2024-042 | 9.1CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13277 | Smart IP Ban Critical Access bypass SA-CONTRIB-2024-041 | 9.1CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13276 | File Entity (fieldable files) Moderately critical information disclosure SA-CONTRIB-2024-040 | 7.5CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13275 | Security Kit Less critical denial of service SA-CONTRIB-2024-039 | 5.3CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13274 | Open Social Moderately critical denial of service SA-CONTRIB-2024-038 | 5.3CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13273 | Open Social Moderately critical cross-site scripting, denial of service SA-CONTRIB-2024-037 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13272 | Paragraphs table Critical Access bypass, information disclosure SA-CONTRIB-2024-036 | 6.3CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13271 | Content Entity Clone Moderately critical information disclosure SA-CONTRIB-2024-035 | 4.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13270 | Freelinking Moderately critical information disclosure SA-CONTRIB-2024-034 | 4.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13269 | Advanced Varnish Moderately critical Access bypass SA-CONTRIB-2024-033 | 5.3CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13268 | Opigno Critical arbitrary PHP code execution SA-CONTRIB-2024-032 | 6.8CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-13267 | Opigno TinCan Question Type Critical arbitrary PHP code execution SA-CONTRIB-2024-031 | 7.5CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-13266 | Responsive and off-canvas menu Moderately critical Access bypass SA-CONTRIB-2024-030 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13265 | Opigno Learning Path Critical Arbitrary PHP code execution SA-CONTRIB-2024-029 | 7.5CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-13264 | Opigno module Critical Arbitrary PHP code execution SA-CONTRIB-2024-028 | 9.8CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-13263 | Opigno Group Manager Critical Arbitrary PHP code execution SA-CONTRIB-2024-027 | 5.5CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13262 | View Password Moderately critical cross-site scripting SA-CONTRIB-2024-026 | 4.8CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13261 | Acquia Dam Moderately critical cross-site request forgery, denial of service SA-CONTRIB-2024-025 | 3.5CISA ADP v3.1 | 0.1% | 2025-01-09 | Fix |
| CVE-2024-13260 | Migrate queue importer Moderately critical cross-site request forgery SA-CONTRIB-2024-024 | 8.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13259 | Image Sizes Moderately critical Access bypass SA-CONTRIB-2024-023 | 7.5CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-13258 | Drupal REST and JSON API Authentication Moderately critical Access bypass SA-CONTRIB-2024-022 | 9.8CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-13257 | Commerce View Receipt Moderately critical Access bypass SA-CONTRIB-2024-021 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13256 | Email Contact Moderately critical Access bypass SA-CONTRIB-2024-020 | 7.5CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13255 | RESTful Web Services Critical Access bypass SA-CONTRIB-2024-019 | 7.5CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-13254 | REST Views Moderately critical information disclosure SA-CONTRIB-2024-018 | 7.5CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-13253 | Advanced PWA Critical Access bypass SA-CONTRIB-2024-017 | 9.1CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13252 | TacJS Moderately critical cross-site scripting SA-CONTRIB-2024-016 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13251 | Registration role Critical Access bypass SA-CONTRIB-2024-015 | 8.8CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13250 | Drupal Symfony Mailer Lite Moderately critical cross-site request forgery SA-CONTRIB-2024-014 | 8.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13249 | Node Access Rebuild Progressive Less critical Access bypass SA-CONTRIB-2024-013 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13248 | Private content Moderately critical Access bypass SA-CONTRIB-2024-012 | 5.5CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13247 | Coffee Moderately critical cross-site scripting SA-CONTRIB-2024-011 | 4.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13246 | Node Access Rebuild Progressive Less critical Access bypass SA-CONTRIB-2024-010 | 5.3CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13245 | CKEditor 4 LTS WYSIWYG HTML editor Moderately critical cross-site scripting SA-CONTRIB-2024-009 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13244 | Migrate Tools Moderately critical cross-site request forgery SA-CONTRIB-2024-008 | 8.8CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13243 | Entity Delete Log Moderately critical Access bypass SA-CONTRIB-2024-007 | 6.5CISA ADP v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13242 | Swift Mailer Moderately critical Access bypass SA-CONTRIB-2024-006 | 9.1CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13241 | Open Social Moderately critical information disclosure SA-CONTRIB-2024-005 | 9.1CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13240 | Open Social Moderately critical Access bypass SA-CONTRIB-2024-004 | 7.5CISA ADP v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13239 | Two-factor Authentication (TFA) Moderately critical Access bypass SA-CONTRIB-2024-003 | 9.8CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-13238 | Typogrify Moderately critical cross-site scripting SA-CONTRIB-2024-002 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13237 | File Entity Moderately critical cross-site scripting, Access bypass SA-CONTRIB-2024-001 | 5.4CISA ADP v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-13213 | SingMR HouseRent toAdminUpdateHousePage cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13212 | SingMR HouseRent AddHouseController.java upload unrestricted upload | 8.8v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13211 | SingMR HouseRent AdminController.java access control | 8.8v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13210 | donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload | 7.2v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-13209 | Redaxo CMS Structure Management page index.php cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-13206 | REVE Antivirus reveinstall default permission | 8.5CNA v4.0 | 0.2% | 2025-01-09 | |
| CVE-2024-13205 | kurniaramadhan E-Commerce-PHP Create Product page create_product.php cross-site scripting | 5.4v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-13204 | kurniaramadhan E-Commerce-PHP blog-details.php SQL injection | 8.0v3.1 | 0.6% | 2025-01-09 | |
| CVE-2024-13203 | kurniaramadhan E-Commerce-PHP cross-site request forgery | 6.9CNA v4.0 | 0.3% | 2025-01-09 | |
| CVE-2024-13202 | wander-chu SpringBoot-Blog Blog Article PageController.java modifiyArticle cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13201 | wander-chu SpringBoot-Blog Admin Attachment AttachtController.java upload unrestricted upload | 7.2v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-13200 | wander-chu SpringBoot-Blog HTTP POST Request BaseInterceptor.java preHandle access control | 7.5v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-13199 | langhsu Mblog Blog System Search Bar search cross-site scripting | 6.1v3.1 | 0.5% | 2025-01-09 | |
| CVE-2024-13198 | langhsu Mblog Blog System login observable response discrepancy | 6.3CNA v4.0 | 0.7% | 2025-01-09 | |
| CVE-2024-13197 | donglight bookstore电商书城系统说明 AdminUserControlle.java updateUser cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13196 | donglight bookstore电商书城系统说明 BookInfoController.java BookSearchList cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-13195 | donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery | 9.8v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-13194 | Sucms admin_members.php SQL injection | 8.8v3.1 | 0.6% | 2025-01-09 | |
| CVE-2024-13153 | Unlimited Elements For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-13041 | Incorrect user management in GitLab | 4.2CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12848 | SKT Page Builder WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8CNA v3.1 | 1.0% | 2025-01-09 | Fix |
| CVE-2024-12819 | Searchie WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-12806 | SonicWall SonicOS post-authentication absolute path traversal | 4.9CISA ADP v3.1 | 0.6% | 2025-01-09 | Fix |
| CVE-2024-12805 | SonicWall SonicOS post-authentication format string | 7.2CISA ADP v3.1 | 0.7% | 2025-01-09 | Fix |
| CVE-2024-12803 | SonicWall SonicOS post-authentication stack-based buffer overflow | 7.2CISA ADP v3.1 | 0.8% | 2025-01-09 | Fix |
| CVE-2024-12802 | SonicWall SonicOS authentication bypass | 9.1CISA ADP v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-12736 | BU Section Editing WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-12731 | Aklamator INfeed reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-12717 | Aklamator INfeed WordPress plugin cross-site scripting | 4.8CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-12715 | Asgard Security Scanner WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-12714 | Backlink Monitoring Manager WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-12621 | Yumpu E-Paper publishing WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12618 | Newsletter2Go WordPress plugin missing authorization to authenticated (Subscriber+) Style reset | 4.3CNA v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-12616 | Bitly's WordPress plugin missing authorization to authenticated (Subscriber+) settings update | 4.3CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12605 | AI Scribe WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-12542 | linkID WordPress plugin missing authorization to unauthenticated sensitive information exposure | 8.6CNA v3.1 | 1.3% | 2025-01-09 | Exploit code |
| CVE-2024-12515 | Muslim Prayer Time-Salah/Iqamah WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12514 | 3DVieweronline WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12496 | Linear WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12493 | Files Download Delay WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-12491 | SimplyRETS Real Estate IDX WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-12394 | Action Network WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-12330 | WP Database Backup WordPress plugin information disclosure | 7.5CNA v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-12285 | SEMA API WordPress plugin reflected cross-site scripting via catid parameter | 6.1CNA v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-12249 | GS Insever Portfolio WordPress plugin missing authorization authenticated CSS injection | 4.3CNA v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-12222 | Deliver via Shipos for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-12218 | Woocommerce check pincode/zipcode for shipping WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2025-01-09 | |
| CVE-2024-12206 | WordPress Header Builder Plugin WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2024-12122 | ResAds WordPress plugin reflected cross-site scripting via Multiple parameters | 6.1CNA v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-12067 | WP Travel Ultimate Travel Booking System, Tour Management Engine WordPress plugin SQL injection | 6.5CNA v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-11929 | Responsive FlipBook Plugin Wordpress authenticated (Subscriber+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-11907 | Skyword API WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-11815 | Pósturinn\'s Shipping with WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-11686 | WhatsApp click to chat WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-11642 | Post Grid Master WordPress plugin missing authorization to unauthenticated local PHP file inclusion | 9.8CNA v3.1 | 1.1% | 2025-01-09 | Fix |
| CVE-2024-11328 | CLUEVO LMS, E-Learning Platform WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2025-01-09 | Fix |
| CVE-2024-10815 | PostLists WordPress plugin reflected XSS | 4.2CISA ADP v3.1 | 0.3% | 2025-01-09 | |
| CVE-2024-10215 | WPBookit WordPress plugin unauthenticated arbitrary user password Change | 9.8CNA v3.1 | 0.7% | 2025-01-09 | Fix |
| CVE-2024-10106 | Ember ZNet buffer overflow in packet handoff plugin | 3.7CNA v3.1 | 0.4% | 2025-01-09 | Fix |
| CVE-2024-6324 | Inefficient algorithmic complexity in GitLab | 4.3CNA v3.1 | 0.7% | 2025-01-09 | Fix |
| CVE-2024-6155 | Greenshift WordPress plugin server-side request forgery | 5.4v3.1 | 0.3% | 2025-01-09 | Fix |
| CVE-2024-5769 | MIMO Woocommerce Order Tracking WordPress plugin missing authorization to limited settings update | 4.3CNA v3.1 | 0.4% | 2025-01-09 | |
| CVE-2024-56787 | Linux kernel i.MX8M SoC driver vulnerability | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56785 | Linux kernel Loongson64 ls7a PCIe device tree vulnerability | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56784 | Linux kernel AMD display driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56783 | Linux kernel netfilter nft_socket match reachable assertion | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56782 | Linux kernel ACPI serdev enumeration null pointer dereference | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56780 | Linux kernel quota writeback race condition | 5.5NVD v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56779 | Linux kernel NFS server open owner handling memory leak | 9.8CNA v3.1 | 0.5% | 2025-01-08 | Fix |
| CVE-2024-56778 | Linux kernel STI DRM HQVDP atomic check vulnerability | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56777 | Linux kernel STI DRM GDP atomic check vulnerability | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56776 | Linux kernel STI DRM CRTC atomic check vulnerability | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56775 | Linux kernel AMD display driver plane state double free | 7.8CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56774 | Linux kernel Btrfs extent tree search null pointer dereference | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56773 | Linux kernel KUnit device driver test null pointer dereference | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56772 | Linux kernel KUnit string-stream framework use-after-free | 7.8v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56771 | In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information These four chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW all require a single bit of ECC strength and thus feature an on-die Hamming-like ECC engine. Ther | 5.5v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56770 | In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from child qdisc In general, 'qlen' of any classful qdisc should keep track of the number of packets that the qdisc itself and all of its children holds. In case of netem, 'qlen' only | 5.5NVD v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-56456 | Huawei HarmonyOS buffer overflow | 6.8CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56455 | Huawei HarmonyOS buffer overflow | 5.5CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56454 | Huawei HarmonyOS buffer overflow | 5.5CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56453 | Huawei HarmonyOS buffer overflow | 6.8CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56452 | Huawei HarmonyOS buffer overflow | 5.5CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56451 | Huawei HarmonyOS integer overflow vulnerability during glTF model loading in the 3D engine module | 7.3CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56450 | Huawei HarmonyOS buffer overflow vulnerability in the component driver module | 6.3CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56449 | Huawei HarmonyOS privilege escalation vulnerability in the Account module | 6.6CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56448 | Huawei HarmonyOS vulnerability of improper access control in the home screen widget module | 6.7CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56447 | Huawei HarmonyOS vulnerability of improper permission control in the window management module | 7.8CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-56446 | Huawei HarmonyOS vulnerability of variables not being initialized in the notification module | 4.0CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56445 | Huawei HarmonyOS instruction authentication bypass vulnerability in the Findnetwork module | 4.3CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-56444 | Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module | 7.5CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-56443 | Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module | 6.2CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56442 | Huawei HarmonyOS vulnerability of native APIs not being implemented in the NFC service module | 5.5CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56441 | Huawei HarmonyOS race condition vulnerability in the Bastet module | 4.1CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56440 | Huawei HarmonyOS permission control vulnerability in the Connectivity module | 6.2CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56439 | Huawei HarmonyOS access control vulnerability in the identity authentication module | 7.5CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-56438 | Huawei HarmonyOS vulnerability of improper memory address protection in the HUKS module | 6.0CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56437 | Huawei HarmonyOS vulnerability of input parameters not being verified in the widget framework module | 5.7CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56436 | Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module | 5.5CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56435 | Huawei HarmonyOS cross-process screen stack vulnerability in the UIExtension module | 6.2CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-56434 | Huawei HarmonyOS UAF vulnerability in the device node access module | 4.4CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-55656 | RedisBloom integer overflow remote code execution | 8.8CNA v3.1 | 17.1% | 2025-01-08 | Fix |
| CVE-2024-55517 | Polaris FT Intellect Core Banking SCGController SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2025-01-08 | |
| CVE-2024-55459 | Keras path traversal | 6.5CISA ADP v3.1 | 0.2% | 2025-01-08 | |
| CVE-2024-54818 | oretnom23 Computer Laboratory Management System improper preservation of permissions | 8.8CISA ADP v3.1 | 0.5% | 2025-01-08 | |
| CVE-2024-54731 | Coherent Graphics CPDF uncontrolled recursion | 4.0CNA v3.1 | 0.2% | 2025-01-08 | |
| CVE-2024-54676 | Apache OpenMeetings: Deserialisation of untrusted data in cluster mode | 9.8v3.1 | 68.8% | 2025-01-08 | Fix |
| CVE-2024-54121 | Huawei HarmonyOS startup control vulnerability in the ability module | 6.2CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-54120 | Huawei HarmonyOS race condition vulnerability in the distributed notification module | 4.1CNA v3.1 | 0.1% | 2025-01-08 | Fix |
| CVE-2024-54010 | HPE AOS-CX incorrect authorization | 3.4CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-53995 | GHSL-2024-288: SickChill open redirect in login | 1.9CNA v4.0 | 1.0% | 2025-01-08 | Nuclei |
| CVE-2024-53526 | Composio command execution | 6.4CISA ADP v3.1 | 0.6% | 2025-01-08 | Fix |
| CVE-2024-52869 | Teradata Database account group assignment vulnerability | 6.0CISA ADP v3.1 | 0.2% | 2025-01-08 | |
| CVE-2024-51737 | RediSearch integer overflow with LIMIT or KNN arguments can lead to RCE | 7.0CNA v3.1 | 0.4% | 2025-01-08 | Fix |
| CVE-2024-51480 | RedisTimeSeries integer overflow remote code execution | 7.0CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-51442 | Minidlna version v1.3.3 and command injection | 8.8CISA ADP v3.1 | 2.3% | 2025-01-08 | |
| CVE-2024-50603 | Aviatrix Controllers OS command injection | 9.8v3.1 | 98.5% | 2025-01-08 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2024-47934 | TXOne Networks Portable Inspector Management Program improper input validation | 6.9CNA v4.0 | 0.4% | 2025-01-08 | |
| CVE-2024-47239 | Dell PowerScale OneFS resource exhaustion | 6.5CNA v3.1 | 0.5% | 2025-01-08 | Fix |
| CVE-2024-45033 | Apache Airflow FAB provider insufficient session expiration | 8.1CISA ADP v3.1 | 1.0% | 2025-01-08 | Fix |
| CVE-2024-40679 | IBM Db2 information disclosure | 5.5CNA v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-13193 | SEMCMS Image Library Management Page SEMCMS_Images.php SQL injection | 4.9v3.1 | 0.5% | 2025-01-08 | |
| CVE-2024-13192 | ZeroWdd myblog BlogController.java update cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-08 | |
| CVE-2024-13191 | ZeroWdd myblog uploadController.java upload unrestricted upload | 9.8v3.1 | 0.6% | 2025-01-08 | |
| CVE-2024-13190 | ZeroWdd myblog BlogMapper.xml XML injection | 5.3CNA v4.0 | 0.5% | 2025-01-08 | |
| CVE-2024-13189 | ZeroWdd myblog MyBlogMvcConfig.java permission | 9.8v3.1 | 0.6% | 2025-01-08 | |
| CVE-2024-13188 | MicroWorld eScan Antivirus Installation var default permission | 7.8v3.1 | 0.3% | 2025-01-08 | |
| CVE-2024-13187 | Kingsoft WPS Office TCC code injection | 4.8CNA v4.0 | 0.2% | 2025-01-08 | |
| CVE-2024-13186 | MinigameCenter information leakage | 6.3CNA v4.0 | 0.4% | 2025-01-08 | |
| CVE-2024-13185 | MinigameCenter module information leakage | 6.3CNA v4.0 | 0.4% | 2025-01-08 | |
| CVE-2024-13173 | Health information leakage | 6.3CNA v4.0 | 0.4% | 2025-01-08 | |
| CVE-2024-12855 | AdForest WordPress theme unauthorized access | 5.4v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12854 | Garden Gnome Package WordPress plugin authenticated (Author+) arbitrary file upload | 8.8CNA v3.1 | 0.8% | 2025-01-08 | Fix |
| CVE-2024-12853 | Modula Image Gallery WordPress plugin authenticated (Author+) arbitrary file upload | 8.8v3.1 | 0.9% | 2025-01-08 | Fix |
| CVE-2024-12852 | Happy Addons for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12851 | Element Pack Lite - Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12713 | SureForms WordPress plugin information disclosure | 5.3CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12712 | Shopping Cart and eCommerce Store WordPress plugin missing authorization to order Updates | 5.3CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12585 | PropertyHive WordPress plugin reflected XSS | 6.1CISA ADP v3.1 | 0.6% | 2025-01-08 | NucleiFix |
| CVE-2024-12584 | 140+ Widgets WordPress plugin information disclosure | 6.5v3.1 | 0.4% | 2025-01-08 | Fix |
| CVE-2024-12521 | Slotti Ajanvaraus WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12431 | Missing authorization in GitLab | 4.3CNA v3.1 | 0.4% | 2025-01-08 | Fix |
| CVE-2024-12337 | Shipping via Planzer for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12328 | MAS Elementor WordPress plugin authenticated (Author+) stored cross-site scripting via SVG | 6.4CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12205 | Themesflat Addons For Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12112 | Easy Form Builder WordPress plugin missing authorization authenticated stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-12045 | Essential Blocks WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-12030 | MDTF Meta Data and Taxonomies Filter WordPress plugin authenticated (Contributor+) SQL injection | 6.5CNA v3.1 | 0.5% | 2025-01-08 | Fix |
| CVE-2024-11939 | Cost Calculator Builder PRO WordPress plugin unauthenticated SQL injection via data | 7.5CNA v3.1 | 0.5% | 2025-01-08 | Fix |
| CVE-2024-11916 | The Ultimate WordPress Toolkit WordPress plugin unauthorized access | 5.4NVD v3.1 | 0.2% | 2025-01-08 | Fix |
| CVE-2024-11830 | DearFlip outline settings stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-11816 | Ultimate WordPress Toolkit WordPress plugin remote code execution | 8.8CNA v3.1 | 0.8% | 2025-01-08 | Fix |
| CVE-2024-11635 | WordPress File Upload plugin Unuathenticated remote code execution | 9.8CNA v3.1 | 1.5% | 2025-01-08 | Exploit codeFix |
| CVE-2024-11613 | WordPress File Upload WordPress plugin remote code execution | 9.8CNA v3.1 | 4.5% | 2025-01-08 | Exploit codeFix |
| CVE-2024-11423 | Ultimate Gift Cards for WooCommerce WordPress plugin missing authorization to Infinite Money Glitch | 7.5CNA v3.1 | 0.8% | 2025-01-08 | Exploit codeFix |
| CVE-2024-11350 | AdForest WordPress theme privilege escalation via password Reset/account takeover | 9.8CNA v3.1 | 0.7% | 2025-01-08 | Fix |
| CVE-2024-11271 | WordPress Webinar Plugin WebinarPress missing authorization authenticated Webinar Updates | 4.3NVD v3.1 | 0.4% | 2025-01-08 | Fix |
| CVE-2024-11270 | WordPress Webinar Plugin WebinarPress missing authorization authenticated arbitrary file creation | 8.8CNA v3.1 | 0.9% | 2025-01-08 | Fix |
| CVE-2024-10585 | InfiniteWP Client WordPress plugin path traversal | 5.3CNA v3.1 | 0.7% | 2025-01-08 | Fix |
| CVE-2024-10151 | Auto iFrame WordPress plugin Contributor+ XSS via shortcode | 5.4CISA ADP v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-9939 | WordPress File Upload WordPress plugin path traversal | 7.5CNA v3.1 | 1.1% | 2025-01-08 | Fix |
| CVE-2024-8002 | VIWIS LMS file upload cross-site scripting | 6.9CNA v4.0 | 0.4% | 2025-01-08 | |
| CVE-2024-6350 | silabs.com Simplicity SDK EmberZNet malformed MAC layer packet leads to denial of service | 6.5CNA v3.1 | 0.3% | 2025-01-08 | Fix |
| CVE-2024-56300 | Post/Page Copying Tool WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-56299 | Notify Odoo WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56298 | Pretty Simple Popup Builder WordPress plugin stored cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56297 | Highlight WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56296 | Mang Board WP WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56294 | Nexter Blocks WordPress plugin broken access control | 6.4CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56293 | AFI The Easiest Integration WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56292 | Email Reminders WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56291 | PlainInventory Inventory Management WordPress plugin PHP object injection | 8.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56290 | Multiple Shipping And Billing Address For Woocommerce WordPress plugin unauthenticated SQL injection | 9.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56289 | Groundhogg WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.7% | 2025-01-07 | Exploit codeFix |
| CVE-2024-56288 | WP Docs WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56287 | WP jQuery DataTable WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56286 | Classic Addons WPBakery Page Builder WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-01-07 | Fix |
| CVE-2024-56285 | WPBITS Addons For Elementor Page Builder WordPress plugin cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56284 | SSL Wireless SMS Notification WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56283 | Locatoraid Store Locator WordPress plugin PHP object injection | 8.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56282 | WPMozo Addons Lite for Elementor WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2025-01-07 | Fix |
| CVE-2024-56281 | 워드프레스 결제 심플페이 우커머스 결제 플러그인 WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-01-07 | Fix |
| CVE-2024-56280 | WPGuppy WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56279 | Compact WP Audio Player WordPress plugin server side request forgery (SSRF) | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56278 | WP Ultimate Exporter WordPress plugin remote code execution (RCE) | 9.1CNA v3.1 | 1.9% | 2025-01-07 | Exploit codeFix |
| CVE-2024-56276 | WPForms Lite WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56275 | Envato Elements WordPress plugin server side request forgery (SSRF) | 4.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56274 | Astra Widgets WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56273 | WPvivid Backup WordPress plugin broken access control | 9.8v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-56272 | Hide Category by User Role for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-56271 | WP SecureSubmit WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-56270 | WP SecureSubmit WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-56056 | SimpleCharm WordPress theme reflected cross-site scripting (XSS) | 7.1CISA ADP v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-55556 | Crater Invoice session cookie handling deserialization of untrusted data | 9.8CISA ADP v3.1 | 44.1% | 2025-01-07 | NucleiMetasploitExploit code |
| CVE-2024-55555 | Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client. | 8.8CISA ADP v3.1 | 6.6% | 2025-01-07 | MetasploitExploit code |
| CVE-2024-55414 | Motorola SM56 Modem WDM Driver SmSerl64.sys driver command injection | 9.8CISA ADP v3.1 | 1.1% | 2025-01-07 | Fix |
| CVE-2024-55413 | SUNIX Parallel Driver x64 snxppamd.sys driver out-of-bounds write | 7.8CISA ADP v3.1 | 0.2% | 2025-01-07 | |
| CVE-2024-55412 | SUNIX Serial Driver x64 snxpsamd.sys driver out-of-bounds write | 7.8CISA ADP v3.1 | 0.2% | 2025-01-07 | |
| CVE-2024-55411 | SUNIX Multi I/O Card snxpcamd.sys driver incorrect permission assignment | 8.8CISA ADP v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-55218 | IceWarp cross-site scripting | 6.1CISA ADP v3.1 | 0.7% | 2025-01-07 | Nuclei |
| CVE-2024-55008 | JATOS missing brute-force protection | 7.5CISA ADP v3.1 | 0.8% | 2025-01-07 | |
| CVE-2024-54819 | I, Librarian validation.php server-side request forgery | 9.1CISA ADP v3.1 | 20.8% | 2025-01-07 | Exploit code |
| CVE-2024-54030 | OpenHarmony communication_dsoftbus has an UAF | 4.4CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-54007 | HPE Aruba Networking 501 Wireless Client Bridge web interface of the command injection | 7.2CNA v3.1 | 1.6% | 2025-01-07 | |
| CVE-2024-54006 | HPE Aruba Networking 501 Wireless Client Bridge web interface of the command injection | 7.2CNA v3.1 | 1.6% | 2025-01-07 | |
| CVE-2024-53800 | Rezgo Online Booking WordPress plugin local file inclusion | 8.1CISA ADP v3.1 | 0.7% | 2025-01-07 | Fix |
| CVE-2024-53522 | Bangkok Medical Software HOSxP XE hardcoded encryption key information disclosure | 7.5CISA ADP v3.1 | 0.8% | 2025-01-07 | Exploit code |
| CVE-2024-53345 | Car Rental Management System file upload feature unrestricted file upload | 8.8CISA ADP v3.1 | 1.3% | 2025-01-07 | Exploit code |
| CVE-2024-52893 | IBM Concert Software information disclosure | 5.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-52891 | IBM Concert Software log manipulation | 5.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-52813 | matrix-org matrix-rust-sdk matrix-sdk-crypto crate vulnerability | 4.3CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-52367 | IBM Concert Software information disclosure | 5.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-52366 | IBM Concert Software information disclosure | 5.9CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-51715 | ClickWhale WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-51700 | NAVER Analytics WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-51651 | CubeWP Forms WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-50660 | Ipublishmedia Adportal file upload | 9.8CISA ADP v3.1 | 0.9% | 2025-01-07 | |
| CVE-2024-50659 | Ipublishmedia Adportal cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-50658 | Ipublishmedia Adportal server-side template injection | 9.8CISA ADP v3.1 | 0.8% | 2025-01-07 | |
| CVE-2024-49649 | Build App Online WordPress plugin local file inclusion | 9.8v3.1 | 0.6% | 2025-01-07 | |
| CVE-2024-49644 | Accessibility by AllAccessible WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-49633 | DirectoryPress WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-49294 | magepeopleteam Bus Ticket Booking with Seat Reservation cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-49249 | SMSA Shipping WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-49222 | WPGuppy WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-48245 | Janobe Vehicle Management System SQL injection | 7.2CISA ADP v3.1 | 1.0% | 2025-01-07 | Exploit code |
| CVE-2024-47398 | OpenHarmony liteos_a has an out-of-bounds write | 8.8CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-46603 | Elspec-ltd G5DFR An XML external entity injection | 7.5CISA ADP v3.1 | 0.7% | 2025-01-07 | |
| CVE-2024-46602 | Elspec-ltd G5DFR XML external entity injection | 7.5CISA ADP v3.1 | 0.7% | 2025-01-07 | Fix |
| CVE-2024-46601 | Elspec-ltd G5DFR buffer overflow | 7.5CISA ADP v3.1 | 0.7% | 2025-01-07 | |
| CVE-2024-46242 | CTFd email validator regular expression denial of service | 7.5CISA ADP v3.1 | 0.7% | 2025-01-07 | |
| CVE-2024-45640 | IBM Security QRadar EDR information disclosure | 5.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-45100 | IBM Security QRadar EDR denial of service | 4.9CNA v3.1 | 0.6% | 2025-01-07 | Fix |
| CVE-2024-45070 | OpenHarmony liteos_a has an out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-44450 | AIMS eCrew insecure direct object reference | 5.4CISA ADP v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-43243 | JobBoard Job listing WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-40749 | Joomla! CMS core Read ACL violation in multiple core views | 7.5CISA ADP v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-40748 | Joomla! CMS core XSS vector in the id attribute of menu lists | 7.5CISA ADP v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-40747 | Joomla! CMS core XSS vectors in module chromes | 6.1CISA ADP v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-40702 | IBM Cognos Controller improper certificate validation | 8.2CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-40427 | Dronecode PX4 Drone Autopilot PX4-Autopilot v1.14.3 stack-based buffer overflow | 7.9CISA ADP v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-35532 | Intersec Geosafe-ea An XML external entity injection | 9.1CISA ADP v3.1 | 0.5% | 2025-01-07 | |
| CVE-2024-28778 | IBM Cognos Controller information disclosure | 6.5CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-25037 | IBM Cognos Controller information disclosure | 4.3CNA v3.1 | 0.6% | 2025-01-07 | Fix |
| CVE-2024-12849 | Error Log Viewer By WP Guru WordPress plugin arbitrary file read | 7.5CNA v3.1 | 48.0% | 2025-01-07 | NucleiExploit codeFix |
| CVE-2024-12781 | Aurum WordPress theme unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12738 | User Profile Builder WordPress plugin stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12719 | WordPress File Upload plugin missing authorization authenticated limited path traversal | 4.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12711 | RSVP and Event Management WordPress plugin missing authorization | 5.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12699 | Service Box WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12633 | JoomSport WordPress plugin reflected cross-site scripting via page | 7.1CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12624 | Sina Extension for Elementor WordPress plugin stored DOM-based cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12592 | Sellsy WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12590 | WP Youtube Gallery WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12559 | ClickDesigns WordPress plugin missing authorization to API Key modification or Removal | 5.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12557 | Transporters.io WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12541 | Chative Live chat and Chatbot WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12538 | Duplicate Post, Page and Any Custom Post WordPress plugin post disclosure via post Duplication | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12535 | Host PHP Info WordPress plugin unauthorized access | 8.6CNA v3.1 | 0.6% | 2025-01-07 | |
| CVE-2024-12532 | BWD Elementor Addons WordPress plugin sensitive information exposure | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12528 | WordPress Survey and Poll Quiz, Survey and Poll Plugin for WordPress stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12516 | Coupon WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12499 | WP jQuery DataTable WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12495 | Bootstrap Blocks for WP Editor v2 WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12471 | Post Saint: ChatGPT add_image_to_library action missing authorization | 8.8CNA v3.1 | 1.5% | 2025-01-07 | Exploit code |
| CVE-2024-12470 | School Management System SakolaWP WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.6% | 2025-01-07 | |
| CVE-2024-12464 | Chatroll Live Chat WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12462 | YOGO Booking WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12457 | Chat Support for Viber WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12453 | Uptodown APK Download Widget WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12445 | RightMessage WP WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12440 | Candifly WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12439 | Marketplace Items WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12438 | WooCommerce Digital Content Delivery FlickRocket WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12437 | Marketplace Items WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-12435 | Compare Products for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12430 | ABB AC500 V3 improper handling of insufficient permissions | 7.3CNA v4.0 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12429 | ABB AC500 V3 path traversal | 5.1CNA v4.0 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12426 | The Document Foundation LibreOffice URL field expansion information disclosure | 6.7CNA v4.0 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-12425 | The Document Foundation LibreOffice path traversal leading to arbitrary .ttf file write | 2.4CNA v4.0 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12419 | tobias_conrad WOW Styler for CF7 shortcode execution arbitrary code execution | 6.5CNA v3.1 | 0.5% | 2025-01-07 | |
| CVE-2024-12416 | Live Sales Notification for Woocommerce WordPress plugin SQL injection | 7.5CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-12402 | Themes Coder WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.6% | 2025-01-07 | Fix |
| CVE-2024-12384 | Binary MLM Woocommerce WordPress plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12383 | Binary MLM Woocommerce WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12332 | School Management System WPSchoolPress WordPress plugin (Student/Parent+) SQL injection | 6.5CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12327 | LazyLoad Background Images WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12324 | Unilevel MLM Plan WordPress plugin reflected cross-site scripting via page | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12322 | ThePerfectWedding.nl Widget WordPress plugin cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12316 | Jupiter X Core WordPress plugin missing authorization to unauthenticated Popup Template export | 5.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12313 | Compare Products for WooCommerce WordPress plugin unauthenticated PHP object injection | 8.1CNA v3.1 | 0.8% | 2025-01-07 | Fix |
| CVE-2024-12291 | ViewMedica 9 WordPress plugin cross-site request forgery to reflected cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12290 | Infility Global WordPress plugin reflected cross-site scripting via set_type parameter | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12288 | Simple add pages or posts WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2025-01-07 | |
| CVE-2024-12264 | PayU CommercePro WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.7% | 2025-01-07 | Fix |
| CVE-2024-12261 | SmartEmailing.cz WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12256 | Simple Video Management System WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-12252 | SEO LAT Auto Post WordPress plugin missing authorization file Overwrite/Upload | 9.8CNA v3.1 | 3.2% | 2025-01-07 | Exploit code |
| CVE-2024-12214 | WooCommerce HSS Extension for Streaming Video WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12207 | Toggles Shortcode and Widget WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12202 | Croma Music WordPress plugin authenticated (Subscriber+) arbitrary options update in ironMusic_ajax | 8.8CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-12176 | WordLift AI powered SEO Schema WordPress plugin missing authorization authenticated settings update | 5.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12170 | ViewMedica Embed WordPress plugin cross-site request forgery to SQL injection | 5.4CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-12159 | Optimize Your Campaigns WordPress plugin information disclosure | 5.3CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-12158 | Arrow Plugins Popup missing authorization | 5.3CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12157 | Popup WordPress plugin SQL injection | 7.5CNA v3.1 | 1.0% | 2025-01-07 | Exploit code |
| CVE-2024-12153 | GDY Modular Content WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12152 | MIPL WC Multisite Sync WordPress plugin unauthenticated arbitrary file download | 7.5CNA v3.1 | 1.1% | 2025-01-07 | Fix |
| CVE-2024-12140 | Elementor Addons AI Addons WordPress plugin information disclosure | 4.3CNA v3.1 | 0.5% | 2025-01-07 | |
| CVE-2024-12131 | WP Job Portal WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-12126 | SEO Keywords WordPress plugin reflected cross-site scripting via google_error parameter | 6.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12098 | ARS Affiliate Page WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12077 | Booking Calendar and Booking Calendar Pro WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-12073 | Meteor Slides WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-12049 | Woo Ukrposhta WordPress plugin reflected cross-site scripting via order, post, and idd parameters | 6.1CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-12033 | Jupiter X Core WordPress plugin missing authorization to authenticated Library Sync | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11934 | Formaloo Form Maker and Customer Analytics formaloo shortcode stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11899 | Slider Pro Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11887 | Geo Content WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11826 | Quill Forms WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11810 | PayGreen Payment Gateway WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-11777 | Sell Media WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11764 | Solar Wizard Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11756 | SweepWidget Contests WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11749 | App Embed WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11725 | SMS Alert Order Notifications WordPress plugin unauthorized access | 8.8CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-11690 | Financial Stocks and Crypto Market Data WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-11681 | Remote code execution in MacPorts | 6.8CISA ADP v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-11627 | Progress Sitefinity insufficient session expiration | 6.8CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11626 | Progress Software Sitefinity cross-site scripting | 8.4CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-11625 | Progress Software Sitefinity information disclosure | 7.7CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11606 | Tabs Shortcode WordPress plugin Contributor+ XSS via shortcode | 5.3CISA ADP v3.1 | 0.5% | 2025-01-07 | |
| CVE-2024-11496 | Infility Global WordPress plugin missing authorization plugin options update | 6.5CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11465 | Custom Product Tabs for WooCommerce WordPress plugin PHP object injection | 7.2CNA v3.1 | 1.0% | 2025-01-07 | Fix |
| CVE-2024-11445 | Image Magnify WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-11437 | Timeline Designer WordPress plugin authenticated (Admin+) SQL injection | 4.9CNA v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-11434 | WP Bulk SMS by SMS.to WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-11383 | CC Canadian Mortgage Calculator WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-11382 | Common Ninja Widgets for WordPress commonninja shortcode stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11378 | Bizapp for WooCommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11377 | Automate Hub Free by Sperse.IO WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2025-01-07 | |
| CVE-2024-11375 | WC1C WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11369 | Store credit / Gift cards for woocommerce WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-11363 | Same but Different Related Posts by Taxonomy WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | |
| CVE-2024-11338 | PIXNET WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-11337 | Horoscope And Tarot WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-11290 | Member Access WordPress plugin information disclosure | 5.3CNA v3.1 | 0.5% | 2025-01-07 | |
| CVE-2024-11282 | Passster WordPress plugin information disclosure | 7.5v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-10866 | Export Import Menus WordPress plugin missing authorization to unauthenticated Menu export | 5.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-10562 | Form Maker by 10Web WordPress plugin Admin+ stored XSS | 2.7CISA ADP v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-10536 | FancyPost WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-10527 | Spacer WordPress plugin missing authorization authenticated limited information disclosure | 3.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-10102 | Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin Contributor+ stored XSS | 2.7CISA ADP v3.1 | 0.5% | 2025-01-07 | Fix |
| CVE-2024-9702 | Social Rocket WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-07 | Fix |
| CVE-2024-9697 | Social Rocket Social Sharing WordPress plugin missing authorization to settings update | 5.3CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-9638 | Category Posts Widget WordPress plugin Admin+ stored XSS | 4.8CISA ADP v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-9502 | Master Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-9354 | Estatik Mortgage Calculator WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-9208 | Enable Accessibility WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-8857 | WordPress Auction plugin Editor+ stored XSS | 4.8CISA ADP v3.1 | 0.3% | 2025-01-07 | |
| CVE-2024-8855 | WordPress Auction plugin Editor+ SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2025-01-07 | |
| CVE-2024-8361 | silabs.com WiSeConnect SDK DoS caused due to wrong hash length returned for SHA2/224 algorithm | 7.5CNA v3.1 | 0.4% | 2025-01-07 | Fix |
| CVE-2024-7696 | Axis Communications AXIS Camera Station Pro log injection | 6.3CNA v3.1 | 0.2% | 2025-01-07 | Fix |
| CVE-2024-56828 | 1000mz ChestnutCMS file upload | 9.8CISA ADP v3.1 | 0.9% | 2025-01-06 | |
| CVE-2024-56769 | Linux kernel dib3000 DVB frontend driver vulnerability | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56768 | Linux kernel BPF helper functions vulnerability | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56767 | Linux kernel at_xdmac null pointer dereference | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56766 | Linux kernel rawnand double free | 7.8v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56765 | Linux kernel powerpc pseries VAS driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56764 | Linux kernel ublk block driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56763 | Linux kernel tracing cpumask interface vulnerability | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56761 | Linux kernel x86 FRED exception handling denial of service | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56760 | Linux kernel PCI MSI irqdomain handling vulnerability | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56759 | Linux kernel Btrfs tree block COW tracepoint use-after-free | 7.8CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56758 | Linux kernel Btrfs relocation null pointer dereference | 5.5v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-56757 | Linux kernel Bluetooth MediaTek USB driver improper resource release | 7.8CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-55629 | Suricata generic detection bypass using TCP urgent support | 7.5CNA v3.1 | 0.5% | 2025-01-06 | Fix |
| CVE-2024-55628 | Suricata oversized resource names utilizing DNS name compression can lead to resource starvation | 7.5CNA v3.1 | 0.7% | 2025-01-06 | Fix |
| CVE-2024-55627 | OISF Suricata TCP stream reassembly buffer heap-based buffer overflow | 5.9CNA v3.1 | 1.0% | 2025-01-06 | Fix |
| CVE-2024-55626 | Suricata oversized bpf file can lead to buffer overflow | 3.3CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-55605 | Suricata allows stack overflow in transforms | 7.5CNA v3.1 | 0.7% | 2025-01-06 | Fix |
| CVE-2024-55553 | FRRouting FRR RPKI RTR validation vulnerability | 7.5CISA ADP v3.1 | 0.9% | 2025-01-06 | Fix |
| CVE-2024-55529 | Zblogcn Z-BlogPHP code injection | 9.8CISA ADP v3.1 | 0.6% | 2025-01-06 | |
| CVE-2024-55408 | ASUS ASCI An improper access control | 5.3CISA ADP v3.1 | 0.2% | 2025-01-06 | |
| CVE-2024-55407 | An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests. | 7.8CISA ADP v3.1 | 0.2% | 2025-01-06 | |
| CVE-2024-55076 | Grocy cross-site request forgery | 8.1CNA v3.1 | 0.3% | 2025-01-06 | |
| CVE-2024-55075 | Grocy forced browsing | 5.3v3.1 | 0.5% | 2025-01-06 | |
| CVE-2024-55074 | Grocy cross-site scripting | 9.0v3.1 | 0.7% | 2025-01-06 | |
| CVE-2024-54880 | Seacms improper preservation of permissions | 9.1CISA ADP v3.1 | 0.9% | 2025-01-06 | Exploit code |
| CVE-2024-54879 | Seacms improper preservation of permissions | 9.1CISA ADP v3.1 | 0.9% | 2025-01-06 | Exploit code |
| CVE-2024-54767 | component /juis_boxinfo.xml of AVM FRITZ!Box An improper access control | 7.5CISA ADP v3.1 | 1.8% | 2025-01-06 | NucleiExploit code |
| CVE-2024-54764 | ipTIME A2004 hostinfo2.cgi information disclosure | 6.5CISA ADP v3.1 | 1.0% | 2025-01-06 | Nuclei |
| CVE-2024-54763 | ipTIME A2004 hostinfo.cgi information disclosure | 6.5CISA ADP v3.1 | 0.8% | 2025-01-06 | Nuclei |
| CVE-2024-53936 | Color Phone Call Screen CallActivity component vulnerability | 6.3CISA ADP v3.1 | 0.2% | 2025-01-06 | |
| CVE-2024-53935 | Color Phone Flash DialerActivity component vulnerability | 6.5CISA ADP v3.1 | 0.3% | 2025-01-06 | |
| CVE-2024-53934 | Color Phone Call Screen Themes DialerActivity component vulnerability | 7.7CISA ADP v3.1 | 0.2% | 2025-01-06 | |
| CVE-2024-53933 | Color Call Theme and Call Screen DialerActivity component vulnerability | 6.3CISA ADP v3.1 | 0.2% | 2025-01-06 | |
| CVE-2024-53932 | Color Phone: Call Screen Theme DialerActivity component vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-53931 | iCaller DialerActivity component vulnerability | 9.1CISA ADP v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-51741 | Redis allows denial of service due to malformed ACL selectors | 4.4CNA v3.1 | 0.3% | 2025-01-06 | Fix |
| CVE-2024-51472 | IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection | 3.1CNA v3.1 | 0.3% | 2025-01-06 | Fix |
| CVE-2024-51112 | PNETLab open redirect | 6.1CISA ADP v3.1 | 0.3% | 2025-01-06 | |
| CVE-2024-51111 | PNETLab cross-site scripting | 4.1CISA ADP v3.1 | 0.3% | 2025-01-06 | |
| CVE-2024-48457 | Netis Wifi6 Router NX10 skk_set.cgi endpoint out-of-bounds read | 7.5CISA ADP v3.1 | 3.1% | 2025-01-06 | MetasploitExploit codeKCV |
| CVE-2024-48456 | Netis Wifi routers change admin password page information disclosure | 7.5CISA ADP v3.1 | 17.3% | 2025-01-06 | Reported exploitedMetasploitExploit codeKCV |
| CVE-2024-48455 | Netis Wifi routers skk_get.cgi information disclosure | 2.7CISA ADP v3.1 | 6.4% | 2025-01-06 | NucleiMetasploitExploit codeKCV |
| CVE-2024-47475 | Dell PowerScale OneFS incorrect permission assignment | 5.0CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-46981 | Redis' Lua library commands may lead to remote code execution | 7.0CNA v3.1 | 8.2% | 2025-01-06 | Exploit codeFix |
| CVE-2024-46622 | SecureAge Security Suite privilege escalation | 9.8CISA ADP v3.1 | 0.6% | 2025-01-06 | |
| CVE-2024-46209 | REDAXO CMS cross-site scripting | 5.4CISA ADP v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-46073 | login page of IceHRM v32.4.0.OS reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-45559 | Qualcomm Snapdragon buffer over-read in Automotive OS Platform | 5.5CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45558 | Qualcomm Snapdragon buffer over-read in WLAN Host Cmn | 7.5CNA v3.1 | 0.4% | 2025-01-06 | Fix |
| CVE-2024-45555 | Qualcomm Snapdragon integer overflow to buffer overflow in Automotive OS Platform | 8.4CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45553 | Qualcomm Snapdragon use-after-free in DSP services | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45550 | Qualcomm Snapdragon improper validation of array index in DSP services | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45548 | Qualcomm Snapdragon buffer over-read in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45547 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45546 | Qualcomm Snapdragon buffer over-read in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45542 | Qualcomm Snapdragon stack-based buffer overflow in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-45541 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN Windows host | 7.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-43064 | Qualcomm Snapdragon Permissions, Privileges, and Access Controls issue in Automotive OS Platform | 7.5CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-43063 | Qualcomm Snapdragon buffer over-read in Automotive Autonomy | 6.1CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-35498 | Grav cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-33067 | Qualcomm Snapdragon buffer over-read in Audio | 6.1CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-33061 | Qualcomm Snapdragon buffer over-read in DSP service | 6.8CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-33059 | Qualcomm Snapdragon use-after-free in Computer Vision | 6.7CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-33055 | Qualcomm Snapdragon use-after-free in Computer Vision | 6.7CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-33041 | Qualcomm Snapdragon use of out-of-range pointer offset in Computer Vision | 6.7CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-31914 | IBM Sterling B2B Integrator cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-31913 | IBM Sterling B2B Integrator cross-site scripting | 5.5CNA v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-23366 | Qualcomm Snapdragon buffer over-read in Automotive Autonomy | 6.6CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-21464 | Qualcomm Snapdragon IPA statistics processing buffer overflow | 8.4CNA v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20154 | MediaTek chipsets stack overflow in Modem | 8.8CISA ADP v3.1 | 3.9% | 2025-01-06 | Fix |
| CVE-2024-20153 | MediaTek chipsets missing critical step in authentication in wlan | 7.5CISA ADP v3.1 | 0.3% | 2025-01-06 | Fix |
| CVE-2024-20152 | MediaTek chipsets reachable assertion in wlan | 4.4CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20151 | MediaTek chipsets out-of-bounds write in Modem | 6.7CISA ADP v3.1 | 0.2% | 2025-01-06 | Fix |
| CVE-2024-20150 | MediaTek chipsets deserialization of untrusted data in Modem | 7.5CISA ADP v3.1 | 0.8% | 2025-01-06 | Fix |
| CVE-2024-20149 | MediaTek chipsets Specified quantity in Modem | 7.5CISA ADP v3.1 | 0.7% | 2025-01-06 | Fix |
| CVE-2024-20148 | MediaTek chipsets out-of-bounds write in wlan | 9.8CISA ADP v3.1 | 0.3% | 2025-01-06 | Fix |
| CVE-2024-20146 | MediaTek chipsets out-of-bounds write in wlan | 8.1CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20145 | MediaTek chipsets out-of-bounds write in DA | 6.6CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20144 | MediaTek chipsets out-of-bounds write in DA | 6.6CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20143 | MediaTek chipsets out-of-bounds write in DA | 6.6CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20140 | MediaTek chipsets out-of-bounds write in power | 6.7CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-20105 | MediaTek chipsets out-of-bounds write in m4u | 6.7CISA ADP v3.1 | 0.1% | 2025-01-06 | Fix |
| CVE-2024-13145 | zhenfeng13 My-Blog uploadController. java upload unrestricted upload | 9.8v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-13144 | zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload | 9.8v3.1 | 0.4% | 2025-01-06 | |
| CVE-2024-13143 | ZeroWdd studentmanager PermissionController. java submitAddPermission cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-06 | |
| CVE-2024-12970 | OS command injection in TUBITAK BILGEM's Pardus OS My Computer | 3.9CNA v3.1 | 1.3% | 2025-01-06 | Exploit codeFix |
| CVE-2024-12311 | Email Subscribers WordPress plugin Admin+ SQL injection | 6.5CISA ADP v3.1 | 0.6% | 2025-01-06 | Fix |
| CVE-2024-12302 | Icegram Engage WordPress plugin Author+ stored XSS | 6.1CISA ADP v3.1 | 0.4% | 2025-01-06 | Fix |
| CVE-2024-11849 | Pods Custom Content Types and Fields WordPress plugin Admin+ stored XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-01-06 | Fix |
| CVE-2024-11356 | Tourmaster WordPress plugin unauthenticated stored XSS via Room Booking | 6.1CISA ADP v3.1 | 0.4% | 2025-01-06 | Fix |
| CVE-2024-8474 | OpenVPN Connect improper removal of sensitive information | 7.5CISA ADP v3.1 | 0.5% | 2025-01-06 | Fix |
| CVE-2024-5594 | OpenVPN improper type validation | 9.1CISA ADP v3.1 | 0.8% | 2025-01-06 | Fix |
| CVE-2024-13142 | ZeroWdd studentmanager RoleController. java submitAddRole cross-site scripting | 4.8v3.1 | 0.4% | 2025-01-05 | |
| CVE-2024-13141 | osuuu LightPicture SVG file upload upload cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-05 | |
| CVE-2024-13140 | Emlog Pro Cover upload article.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-05 | |
| CVE-2024-13139 | wangl1989 mysiteforme FileController doContent server-side request forgery | 8.8v3.1 | 0.6% | 2025-01-05 | |
| CVE-2024-13138 | wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted upload | 8.8v3.1 | 0.4% | 2025-01-05 | |
| CVE-2024-13137 | wangl1989 mysiteforme SiteController RestResponse cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-05 | |
| CVE-2024-13136 | wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserialization | 9.8v3.1 | 0.6% | 2025-01-05 | |
| CVE-2024-13135 | Emlog Pro Subpage twitter.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-05 | |
| CVE-2024-13134 | ZeroWdd studentmanager TeacherController. java editTeacher unrestricted upload | 8.8v3.1 | 0.4% | 2025-01-05 | |
| CVE-2024-13133 | ZeroWdd studentmanager StudentController. java editStudent unrestricted upload | 8.8v3.1 | 0.4% | 2025-01-05 | |
| CVE-2024-13132 | Emlog Pro Subpage article.php cross-site scripting | 5.4v3.1 | 0.4% | 2025-01-05 | |
| CVE-2024-13130 | Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal | 5.3CNA v4.0 | 0.6% | 2025-01-05 | |
| CVE-2024-41768 | IBM Engineering Lifecycle Optimization Publishing unhandled SLL exception | 6.5CNA v3.1 | 0.4% | 2025-01-04 | Fix |
| CVE-2024-41767 | IBM Engineering Lifecycle Optimization Publishing SQL injection | 7.3CNA v3.1 | 0.3% | 2025-01-04 | Fix |
| CVE-2024-41766 | IBM Engineering Lifecycle Optimization Publishing denial of service | 7.5CNA v3.1 | 0.5% | 2025-01-04 | Fix |
| CVE-2024-41765 | IBM Engineering Lifecycle Optimization Publishing directory traversal | 6.5CNA v3.1 | 0.6% | 2025-01-04 | Fix |
| CVE-2024-41763 | IBM Engineering Lifecycle Optimization Publishing information disclosure | 5.9CNA v3.1 | 0.2% | 2025-01-04 | Fix |
| CVE-2024-12701 | WP Smart Import: Import any XML File to WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-04 | Fix |
| CVE-2024-12583 | Dynamics 365 Integration WordPress plugin remote code execution and arbitrary file read | 9.9CNA v3.1 | 1.4% | 2025-01-04 | Fix |
| CVE-2024-12545 | Scratch and Win Giveaways and Contests WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.2% | 2025-01-04 | Fix |
| CVE-2024-12475 | WP Multi Store Locator WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-04 | Fix |
| CVE-2024-12279 | WP Social AutoConnect WordPress plugin cross-site request forgery to reflected cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-01-04 | Fix |
| CVE-2024-12221 | Turnkey bbPress by WeaverTheme WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-04 | Fix |
| CVE-2024-12195 | WP Project Manager WordPress plugin SQL injection | 6.5v3.1 | 0.4% | 2025-01-04 | Fix |
| CVE-2024-12047 | WP Compress WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-04 | Fix |
| CVE-2024-11974 | Media Library Assistant WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-01-04 | Fix |
| CVE-2024-11930 | Taskbuilder WordPress Project and Task Management plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-01-04 | Fix |
| CVE-2024-10957 | UpdraftPlus: WP Backup and Migration Plugin - unauthenticated PHP object injection | 8.8CNA v3.1 | 0.7% | 2025-01-04 | Fix |
| CVE-2024-10932 | Backup Migration WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.8% | 2025-01-04 | Fix |
| CVE-2024-56514 | Karmada Tar Slips in CRDs archive extraction | 5.3CNA v4.0 | 0.7% | 2025-01-03 | Fix |
| CVE-2024-56513 | Karmada PULL Mode Cluster privilege escalation | 8.7CNA v4.0 | 0.5% | 2025-01-03 | Fix |
| CVE-2024-56412 | PhpSpreadsheet vulnerable to bypass of the XSS sanitizer | 4.8CNA v4.0 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-56411 | PhpSpreadsheet has cross-site scripting vulnerability of the hyperlink base in the HTML page header | 4.8CNA v4.0 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-56410 | PhpSpreadsheet has cross-site scripting (XSS) vulnerability in custom properties | 4.8CNA v4.0 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-56409 | PhpSpreadsheet vulnerable to unauthorized reflected XSS in Currency.php file | 8.3CNA v4.0 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-56408 | PhpSpreadsheet allows unauthorized reflected XSS in `Convert-Online.php` file | 8.3CNA v4.0 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-56366 | PhpSpreadsheet vulnerable to unauthorized reflected XSS in the Accounting.php file | 8.3CNA v4.0 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-56365 | PhpSpreadsheet vulnerable to unauthorized reflected XSS in the constructor of the Downloader class | 8.3CNA v4.0 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-56332 | Next.js vulnerable to denial of service (DoS) with Server Actions | 5.3CNA v3.1 | 0.8% | 2025-01-03 | Fix |
| CVE-2024-56324 | GoCD vulnerable to XXE injection via abuse of pipeline XML snippet editing by group admins | 2.1CNA v4.0 | 0.8% | 2025-01-03 | Fix |
| CVE-2024-56322 | GoCD vulnerable to XXE injection via abuse of unused XML configuration repository functionality | 2.1CNA v4.0 | 0.7% | 2025-01-03 | Fix |
| CVE-2024-56321 | GoCD can allow malicious GoCD admins to abuse backup configuration to gain additional host access | 3.8CNA v3.1 | 0.5% | 2025-01-03 | Fix |
| CVE-2024-56320 | GoCD vulnerable to admin privilege escalation by a malicious internal/existing authenticated user | 9.4CNA v4.0 | 0.7% | 2025-01-03 | Fix |
| CVE-2024-55897 | IBM PowerHA SystemMirror for i information disclosure | 4.3CNA v3.1 | 0.2% | 2025-01-03 | Fix |
| CVE-2024-55896 | IBM PowerHA SystemMirror for i clickjacking | 5.4CNA v3.1 | 0.2% | 2025-01-03 | Fix |
| CVE-2024-55507 | CodeAstro Complaint Management System improper preservation of permissions | 9.8CISA ADP v3.1 | 0.6% | 2025-01-03 | |
| CVE-2024-55078 | component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 An arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2025-01-03 | |
| CVE-2024-53842 | Google Android cc_MmConManagement.c out-of-bounds write | 9.8CISA ADP v3.1 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-53841 | Google Android startListeningForDeviceStateChanges insecure permissions | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53840 | Google Android incorrect default permissions | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53839 | Google Android protocolnetadapter.cpp out-of-bounds read | 5.5CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53838 | Google Android VendorVideoAPI.cpp out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53837 | Google Android lwis_periodic_io.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53836 | Google Android wb_regon_coordinator.c out-of-bounds write | 6.7CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53835 | Google Android incorrect default permissions | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-53834 | Google Android sms_Utilities.c out-of-bounds read | 7.5CISA ADP v3.1 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-53833 | Google Android lwis_transaction.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-48814 | Silverpeas SQL injection | 7.5CISA ADP v3.1 | 0.5% | 2025-01-03 | |
| CVE-2024-47032 | Google Android lwis_ioctl.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-43769 | Google Android PackageManagerService.java privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-43768 | Google Android SkDeflate.cpp out-of-bounds write | 7.8CISA ADP v3.1 | 0.2% | 2025-01-03 | Fix |
| CVE-2024-43767 | Google Android SkBlurMaskFilterImpl.cpp heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.5% | 2025-01-03 | Fix |
| CVE-2024-43764 | Google Android ClipboardListener.java privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-43762 | Google Android multiple locations privilege escalation | 7.8CISA ADP v3.1 | 0.2% | 2025-01-03 | Fix |
| CVE-2024-43097 | Google Android SkRegion.cpp out-of-bounds write | 7.8CISA ADP v3.1 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-43077 | Google Android devicemem_server.c out-of-bounds write | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-41780 | IBM Jazz Foundation information disclosure | 4.2CNA v3.1 | 0.2% | 2025-01-03 | Fix |
| CVE-2024-36613 | FFmpeg integer overflow | 6.2CISA ADP v3.1 | 0.3% | 2025-01-03 | Fix |
| CVE-2024-35365 | FFmpeg audio stream initialization double free | 8.8CISA ADP v3.1 | 0.7% | 2025-01-03 | Fix |
| CVE-2024-13129 | Roxy-WI roxy.py action_service os command injection | 8.7CNA v4.0 | 17.8% | 2025-01-03 | Fix |
| CVE-2024-12237 | Photo Gallery Slideshow and Masonry Tiled Gallery WordPress plugin server-side request forgery | 4.3CNA v3.1 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-12132 | WP Job Portal WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-11733 | WordPress Popular Posts plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2025-01-03 | Fix |
| CVE-2024-11624 | Google Android incorrect default permissions | 7.8CISA ADP v3.1 | 0.1% | 2025-01-03 | Fix |
| CVE-2024-9140 | Moxa EDR-8010 Series OS command injection | 9.3CNA v4.0 | 1.8% | 2025-01-03 | Fix |
| CVE-2024-9138 | Moxa EDR-810 Series hard-coded credentials | 8.6CNA v4.0 | 1.2% | 2025-01-03 | Fix |
| CVE-2024-5591 | IBM Jazz Foundation information disclosure | 4.3CNA v3.1 | 0.4% | 2025-01-03 | Fix |
| CVE-2024-56830 | The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present. | 5.4CNA v3.1 | 0.4% | 2025-01-02 | |
| CVE-2024-56829 | Huang Yaoshi Pharmaceutical Management Software XSDService SOAP endpoint arbitrary file upload | 10.0CNA v3.1 | 0.6% | 2025-01-02 | |
| CVE-2024-56414 | Acronis Cyber Protect 16 weak hash | 5.5CNA v3.0 | 0.1% | 2025-01-02 | Fix |
| CVE-2024-56413 | Acronis Cyber Protect 16 insufficient session expiration | 6.1CNA v3.0 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-56302 | ConvertCalculator for WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56268 | Post Grid Elementor Addon WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-56267 | Interactive UK Map WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56266 | MP3 Audio Player WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56264 | ACF City Selector WordPress plugin arbitrary file upload | 6.6CNA v3.1 | 0.9% | 2025-01-02 | Exploit codeFix |
| CVE-2024-56263 | GS Shots for Dribbble WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56262 | GS Coaches WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56261 | Project Showcase WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56260 | ShopElement WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56259 | GeoDirectory WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56258 | Magazine Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56257 | Coins MarketCap WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-56255 | AyeCode Connect WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56254 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through <= 1.3.6. | 5.4v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56253 | Data Tables Generator by Supsystic WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56252 | Enter Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56251 | Event Espresso WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-56250 | Just Writing Statistics WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-01-02 | Fix |
| CVE-2024-56249 | WPMasterToolKit WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 1.3% | 2025-01-02 | Exploit codeFix |
| CVE-2024-56248 | WPMasterToolKit WordPress plugin arbitrary file download | 4.9CNA v3.1 | 0.5% | 2025-01-02 | Fix |
| CVE-2024-56247 | WP Post Author WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2025-01-02 | Fix |
| CVE-2024-56246 | Nexter Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56245 | Premium Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56244 | Ashe Extra WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56243 | WPSSO Core WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56242 | Arconix Shortcodes WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-56241 | WPKoi Templates for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56240 | Pronamic Google Maps WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56239 | Themify Audio Dock WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56238 | Floating Action Buttons WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2025-01-02 | Fix |
| CVE-2024-56237 | Contest Gallery WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56236 | Hestia Nginx Cache WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.4% | 2025-01-02 | Fix |
| CVE-2024-56199 | phpMyFAQ vulnerable to stored HTML injection at FAQ | 5.2CNA v3.1 | 0.4% | 2025-01-02 | Fix |
| CVE-2024-56137 | MaxKB RCE vulnerability in function library | 6.8CNA v3.1 | 0.8% | 2025-01-02 | Fix |
| CVE-2024-56069 | WP SuperBackup WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56060 | HTML Forms WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56038 | SendSMS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56037 | User Referral WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56036 | odPhotogallery WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56035 | Upload Scanner WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56034 | Services updates for customers WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56033 | FAQs WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56032 | FV Descriptions WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-56030 | 10CentMail WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56029 | Easy Language Switcher WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56028 | Lemonade Social Networks Autoposter Pinterest WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56027 | Leads CRM WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56026 | Simple Proxy WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56025 | AdWork Media EZ Content Locker WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56024 | Custom Dashboard Widget WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56023 | WP eCommerce Quickpay WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56022 | Preloader by WordPress Monsters plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56019 | Inline Footnotes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-56018 | BU Section Editing WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-56014 | Olivia WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-55543 | Acronis Cyber Protect 16 uncontrolled search path | 7.3CNA v3.0 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-55542 | Acronis Cyber Protect 16 incorrect privilege assignment | 4.4CNA v3.0 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-55541 | Acronis Cyber Protect 16 cross-site scripting | 3.1CNA v3.0 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-55540 | Acronis Cyber Protect 16 uncontrolled search path | 6.6CNA v3.0 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-55538 | Acronis True Image missing authentication | 4.0CNA v3.0 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-49385 | Acronis True Image incorrect permission assignment | 5.5CNA v3.0 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-48197 | Audiocodes MP-202b v.4.4.3 cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2025-01-02 | Exploit code |
| CVE-2024-43927 | Email Address Encoder WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-39623 | ListingPro WordPress theme cross-site request forgery (CSRF) to account takeover | 8.8v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-38790 | Smartsupp WordPress plugin cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38789 | Telegram Bot and Channel WordPress plugin cross-site request forgery (CSRF) | 5.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38778 | WordPress WP Fast Total Search plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38766 | Matomo Analytics WordPress plugin cross-site request forgery (CSRF) leading to Notice Dismissal | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38765 | Oceanic WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-38764 | i-transform WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-38763 | Popularis Verse WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38762 | Event Tickets and Registration WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38754 | Taggbox WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38753 | Animated Rotating Words WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38751 | AdsforWP WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38732 | Patricia Blog WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-38731 | i-amaze WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-38729 | MBE eShip WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-38691 | Metorik WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37937 | Rara Business WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37931 | Point WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-37925 | BuddyBoss WordPress theme cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37543 | Ultimate Auction WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37540 | Leaky Paywall WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37518 | The Events Calendar WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37511 | Swift Performance Lite WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37508 | Construction Landing Page WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37503 | Lawyer Landing Page WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37493 | Posterity WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37491 | Rife Free WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37490 | Bard WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37478 | Ashe WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37473 | Trendy News WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37469 | Blocksy WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37467 | Hestia WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37458 | Highlight WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37452 | Schema Lite WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | |
| CVE-2024-37451 | Travel Agency WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37450 | Benevolent WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37448 | OnePress WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37441 | NewsMash WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37438 | Uncanny Toolkit Pro for LearnDash WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37435 | Perfect Portfolio WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37431 | Mesmerize WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37426 | Elegant Pink WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37421 | JobScout WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37417 | Coachify WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37413 | Preschool and Kindergarten WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37412 | Blossom Shop WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37274 | WP Mobile Menu WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37272 | Travel Monster WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37243 | Vandana Lite WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37242 | Newspack Newsletters WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37241 | WP Job Manager Resume Manager WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37240 | Falang multilanguage for WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37238 | WPAdverts WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37237 | FS Poster WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37236 | Loco Translate WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37235 | Groundhogg WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37104 | Chic Lite WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37103 | Education Zone WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37102 | Vilva WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-37093 | MasterStudy LMS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2024-13111 | Beijing Yunfan Internet Technology Learning Examination System improper authentication | 8.1v3.1 | 0.8% | 2025-01-02 | |
| CVE-2024-13110 | Beijing Yunfan Internet Technology Learning Examination System information disclosure | 7.5v3.1 | 0.6% | 2025-01-02 | |
| CVE-2024-13109 | Beijing Yunfan Internet Technology Learning Examination System improper authorization | 6.9CNA v4.0 | 0.6% | 2025-01-02 | |
| CVE-2024-13108 | D-Link DIR-816 A2 form2NetSniper.cgi access control | 5.3v3.1 | 1.0% | 2025-01-02 | |
| CVE-2024-13107 | D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access control | 5.3v3.1 | 1.1% | 2025-01-02 | |
| CVE-2024-13106 | D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access control | 5.3v3.1 | 26.0% | 2025-01-02 | Emerging Threats |
| CVE-2024-13105 | D-Link DIR-816 A2 DHCPD setting form2Dhcpd.cgi access control | 5.3v3.1 | 0.8% | 2025-01-02 | |
| CVE-2024-13104 | D-Link DIR-816 A2 WiFi settings form2AdvanceSetup.cgi access control | 5.3v3.1 | 0.7% | 2025-01-02 | |
| CVE-2024-13103 | D-Link DIR-816 A2 Virtual service form2AddVrtsrv.cgi access control | 5.3v3.1 | 0.8% | 2025-01-02 | |
| CVE-2024-13102 | D-Link DIR-816 A2 DDNS service access control | 5.3v3.1 | 0.8% | 2025-01-02 | |
| CVE-2024-13093 | code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php SQL injection | 7.5v3.1 | 0.6% | 2025-01-02 | |
| CVE-2024-13092 | code-projects Job Recruitment Job Post search_ajax.php SQL injection | 7.5v3.1 | 0.6% | 2025-01-02 | |
| CVE-2024-13062 | ASUS Router command injection | 7.2CNA v3.1 | 1.0% | 2025-01-02 | |
| CVE-2024-12912 | ASUS Router command injection | 7.2CNA v3.1 | 1.2% | 2025-01-02 | Reported exploitedExploit codeKCV |
| CVE-2024-12907 | Kentico CMS cross-site scripting | 5.3CNA v4.0 | 0.4% | 2025-01-02 | |
| CVE-2024-12595 | AHAthat WordPress plugin reflected XSS via REQUEST_URI | 4.7CISA ADP v3.1 | 0.3% | 2025-01-02 | |
| CVE-2024-11717 | CTFd weak credentials | 6.3CNA v4.0 | 0.7% | 2025-01-02 | Fix |
| CVE-2024-11716 | CTFd team bracket assignment vulnerability | 5.3CNA v4.0 | 11.7% | 2025-01-02 | Fix |
| CVE-2024-11357 | Goodlayers Core WordPress plugin Contributor+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2025-01-02 | Fix |
| CVE-2024-11184 | WP Enabled SVG WordPress plugin Author+ stored XSS via SVG | 4.8CISA ADP v3.1 | 0.4% | 2025-01-02 | |
| CVE-2024-9950 | Abuse of Unauthenticated Compliance Recheck in SecureConnector | 8.5CNA v4.0 | 0.3% | 2025-01-02 | Exploit code |
| CVE-2024-8447 | Red Hat JBoss EAP XP narayana: Deadlock via multiple join requests sent to lra coordinator | 5.9CNA v3.1 | 0.7% | 2025-01-02 | Fix |
| CVE-2024-56021 | Category Post Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-01-01 | |
| CVE-2024-56020 | SvegliaT Buttons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-01-01 | |
| CVE-2024-11846 | GoodLayers TravelTour reflected cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-01-01 | Fix |