CVEs published March 27, 2024
285 CVEs were published on March 27, 2024: 11 critical, 112 high.
- Published
- 285
- Critical
- 11
- High
- 112
- Medium
- 148
- Low
- 10
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 23
Most affected products
- Campcodes Online Examination System
- 8
- Cisco IOS XE Software
- 8
- Tenda FH1202
- 8
- Tenda FH1203
- 7
- Cisco IOS
- 5
- code-projects Online Book System
- 5
- https://elementor.com/ Elementor Website Builder Pro
- 5
- nvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- 5
- Tenda FH1205
- 5
- curl
- 4
Critical 11
- CVE-2023-6153Authentication Bypass in TeoSOFT Software TeoBASETeoSOFT Software TeoBASE
- CVE-2023-6173SQLi in TeoSOFT Software TeoBASETeoSOFT Software TeoBASE
- CVE-2023-49815WordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerabilityWappPress Team WappPress
- CVE-2023-31634In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data.
- CVE-2023-45924libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen().
- CVE-2023-45927S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
- CVE-2023-45929S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
- CVE-2024-25393A stack buffer overflow occurs in net/at/src/at_server.c in RT-Thread through 5.0.2.
- CVE-2024-25735An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
- CVE-2024-28335Lektor before 3.3.11 does not sanitize DB path traversal.lektor
- CVE-2024-28815A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive i
High 112
- CVE-2024-3010Tenda FH1205 setcfm formSetCfm stack-based overflowTenda FH1205
- CVE-2024-0980The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code.Okta Verify for Windows
- CVE-2024-3008Tenda FH1205 execCommand formexeCommand stack-based overflowTenda FH1205
- CVE-2024-3007Tenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflowTenda FH1205
- CVE-2024-3006Tenda FH1205 fromRouteStatic fromSetRouteStatic stack-based overflowTenda FH1205
- CVE-2024-0077CVEnvidia vGPU driver, Cloud Gaming driver
- CVE-2024-0074CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-0073CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-0071CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-3000code-projects Online Book System index.php sql injectioncode-projects Online Book System
- CVE-2024-2994Tenda FH1203 GetParentControlInfo stack-based overflowTenda FH1203
- CVE-2024-2993Tenda FH1203 QuickIndex formQuickIndex stack-based overflowTenda FH1203
- CVE-2024-29891ZITADEL Improper Content-Type Validation Leads to Account Takeover via Stored XSS + CSP Bypasszitadel · github.com/zitadel/zitadel
- CVE-2024-2992Tenda FH1203 setcfm formSetCfm stack-based overflowTenda FH1203
- CVE-2024-29887Serverpod client accepts any certificateserverpod
- CVE-2024-28860Insecure IPsec transport encryption in Ciliumcilium · github.com/cilium/cilium
- CVE-2024-2990Tenda FH1203 execCommand formexeCommand stack-based overflowTenda FH1203
- CVE-2024-28247Pihole Authenticated Arbitrary File Read with root privilegespi-hole
- CVE-2024-28233XSS in JupyterHub via Self-XSS leveraged by Cookie Tossingjupyterhub
- CVE-2024-2989Tenda FH1203 NatStaticSetting fromNatStaticSetting stack-based overflowTenda FH1203
- CVE-2024-2988Tenda FH1203 fromRouteStatic fromSetRouteStatic stack-based overflowTenda FH1203
- CVE-2024-20308A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacCisco IOS
- CVE-2023-0582Path Traversal in ForgeRock Access Managmentforgerock access management
- CVE-2024-20271A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a dCisco Aironet Access Point Software · Cisco Business Wirele…
- CVE-2024-20303A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauCisco IOS XE Software
- CVE-2024-2987Tenda FH1202 GetParentControlInfo stack-based overflowTenda FH1202
- CVE-2024-20314A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticCisco IOS XE Software
- CVE-2024-20312A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allCisco IOS
- CVE-2024-20259A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected dCisco IOS XE Software
- CVE-2024-20276A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an Cisco IOS
- CVE-2024-20311A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenCisco IOS
- CVE-2024-2986Tenda FH1202 SetSpeedWan formSetSpeedWan stack-based overflowTenda FH1202
- CVE-2024-2985Tenda FH1202 QuickIndex formQuickIndex stack-based overflowTenda FH1202
- CVE-2024-29945Splunk Authentication Token Exposure in Debug Log in Splunk EnterpriseSplunk Enterprise
- CVE-2024-29946Risky command safeguards bypass in Dashboard Examples HubSplunk Enterprise · Splunk Cloud Platform
- CVE-2024-2984Tenda FH1202 setcfm formSetCfm stack-based overflowTenda FH1202
- CVE-2024-2983Tenda FH1202 SetClientState formSetClientState stack-based overflowTenda FH1202
- CVE-2024-1540Command Injection in gradio-app/gradio via deploy+test-visual.yml workflowgradio-app/gradio
- CVE-2024-2981Tenda FH1202 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflowTenda FH1202
- CVE-2024-2980Tenda FH1202 execCommand formexeCommand stack-based overflowTenda FH1202
- CVE-2024-2979Tenda F1203 openSchedWifi setSchedWifi stack-based overflowTenda F1203
- CVE-2024-2978Tenda F1203 setcfm formSetCfm stack-based overflowTenda F1203
- CVE-2024-30238WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerabilityWasiliy Strecker / ContestGallery developer Contest Gallery
- CVE-2024-2977Tenda F1203 QuickIndex formQuickIndex stack-based overflowTenda F1203
- CVE-2024-2976Tenda F1203 execCommand R7WebsSecurityHandler stack-based overflowTenda F1203
- CVE-2023-39311WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerabilityThemeFusion Fusion Builder
- CVE-2024-29773WordPress BizPrint plugin <= 4.5.5 - CSRF to XSS vulnerabilityBizSwoop a CPF Concepts, LLC Brand BizPrint
- CVE-2024-29758WordPress Co-marquage service-public.fr plugin <= 0.5.72 - Reflected Cross Site Scripting (XSS) vulnerabilityKienso Co-marquage service-public.fr
- CVE-2024-29759WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerabilityCodePeople Calculated Fields Form
- CVE-2024-29760WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerabilityPluggabl Booster for WooCommerce
- CVE-2024-29763WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-29767WordPress Doneren met Mollie plugin <= 2.10.2 - Cross Site Scripting (XSS) vulnerabilityWobbie.nl Doneren met Mollie
- CVE-2024-29777WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerabilityWPMU DEV - Your All-in-One WordPress Platform Forminator
- CVE-2024-29770WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilityShortlinks by Pretty Links
- CVE-2024-29774WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityWpDirectoryKit WP Directory Kit
- CVE-2024-29792WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2024-29790WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerabilitySEO Plugin by Squirrly SEO
- CVE-2024-29791WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerabilityMad Fish Digital Bulk NoIndex & NoFollow Toolkit
- CVE-2024-29794WordPress Conversios.io plugin <= 6.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityConversios.io
- CVE-2023-6400Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management (ZCM) product.OpenText™ ZENworks Configuration Management
- CVE-2024-29805WordPress Shipping with Venipak for WooCommerce plugin <= 1.19.5 - Reflected Cross Site Scripting (XSS) vulnerabilityShopUp Shipping with Venipak for WooCommerce
- CVE-2024-29806WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Reflected Cross Site Scripting (XSS) vulnerabilityReservation Diary ReDi Restaurant Reservation
- CVE-2024-25962Dell InsightIQ, version 5.0, contains an improper access control vulnerability.Dell InsightIQ
- CVE-2024-29931WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerabilityWPGMaps WP Go Maps
- CVE-2024-2398HTTP/2 push headers memory-leakcurl
- CVE-2024-29928WordPress Advanced Sermons plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityWP Codeus Advanced Sermons
- CVE-2024-29924WordPress Premium Packages plugin <= 5.8.2 - Cross Site Scripting (XSS) vulnerabilityW3 Eden Premium Packages
- CVE-2024-29923WordPress PropertyHive plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityPropertyHive
- CVE-2024-29919WordPress Photo Gallery by Ays Plugin <=5.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilityPhoto Gallery Team Photo Gallery by Ays
- CVE-2024-29918WordPress Survey Maker plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilitySurvey Maker team Survey Maker
- CVE-2024-29915WordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityPodlove Podcast Publisher
- CVE-2024-29907WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityActive Websight SEO Backlink Monitor
- CVE-2024-2954The Action Network plugin for WordPress is vulnerable to SQL Injection via the 'bulk-action' parameter in version 1.4.3 due to insufficient jonathankissam Action Network
- CVE-2024-30194WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2024-30195WordPress New RoyalSlider plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilitySemenov New RoyalSlider
- CVE-2024-30196WordPress Easy Social Share Buttons plugin <= 9.4 - Reflected Cross Site Scripting (XSS) vulnerabilityAppscreo Easy Social Share Buttons
- CVE-2024-30201WordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityXylus Themes WordPress Importer
- CVE-2024-30199WordPress WP-Lister Lite for Amazon plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerabilityWP Lab WP-Lister Lite for Amazon
- CVE-2024-22299WordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerabilityFoliovision: Making the web work for you FV Flowplayer Vide…
- CVE-2024-22300WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerabilityIcegram Email Subscribers & Newsletters
- CVE-2024-22149WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityOliver Seidel, Bastian Germann CformsII
- CVE-2024-22288WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityWebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
- CVE-2024-24700WordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerabilityBenjamin Rojas WP Editor
- CVE-2024-24800WordPress Product Feed PRO for WooCommerce plugin <= 13.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityAdTribes.io Product Feed PRO for WooCommerce
- CVE-2024-25926WordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityIndiaNIC Widgets Controller
- CVE-2023-39306WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeFusion Fusion Builder
- CVE-2024-22311WordPress Simply Schedule Appointments plugin <= 1.6.6.20 - Reflected Cross Site Scripting (XSS) vulnerabilityN Squared Simply Schedule Appointments
- CVE-2024-24842WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 11.30.2 - PHP Object Injection vulnerabilityEcho Plugins Knowledge Base for Documentation, FAQs with AI…
- CVE-2024-2097An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List controlHitachi Energy MACH SCM Server · Hitachi Energy MACH SCM To…
- CVE-2024-0400SCM Software is a client and server application.Hitachi Energy MACH SCM
- CVE-2024-1531A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series CMU firmware
- CVE-2024-2206SSRF Vulnerability in gradio-app/gradiogradio-app/gradio · gradio
- CVE-2023-29134An issue was discovered in the Cargo extension for MediaWiki through 1.39.3.
- CVE-2023-40284An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40286An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40287An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40288An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40289A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-40290An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-43768An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1.
- CVE-2023-45931Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state.
- CVE-2023-46047An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function.
- CVE-2024-24334A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
- CVE-2024-24335A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
- CVE-2024-25354RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.domain-suffix
- CVE-2024-25388drivers/wlan/wlan_mgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow.
- CVE-2024-25389RT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;"
- CVE-2024-25390A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2.
- CVE-2024-25391A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2.
- CVE-2024-25395A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2.
- CVE-2024-25734An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
- CVE-2024-25736An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
Medium, low and unrated 162
- CVE-2024-3009Tenda FH1205 WriteFacMac formWriteFacMac command injectionTenda FH1205
- CVE-2024-3004code-projects Online Book System Product.php cross site scriptingcode-projects Online Book System
- CVE-2024-3003code-projects Online Book System cart.php sql injectioncode-projects Online Book System
- CVE-2024-3002code-projects Online Book System description.php sql injectioncode-projects Online Book System
- CVE-2024-0079CVEnvidia vGPU driver, Cloud Gaming driver
- CVE-2024-0075CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-0078CVEnvidia GPU Display driver, vGPU driver, Cloud Gaming driver
- CVE-2024-3001code-projects Online Book System Product.php sql injectioncode-projects Online Book System
- CVE-2024-2999Campcodes Online Art Gallery Management System adminHome.php sql injectionCampcodes Online Art Gallery Management System
- CVE-2024-2998Bdtask Multi-Store Inventory Management System Store Update Page cross site scriptingBdtask Multi-Store Inventory Management System
- CVE-2024-2997Bdtask Multi-Store Inventory Management System cross site scriptingBdtask Multi-Store Inventory Management System
- CVE-2024-2996Bdtask Multi-Store Inventory Management System Page Title cross site scriptingBdtask Multi-Store Inventory Management System
- CVE-2024-2995NUUO Camera deletefile.php denial of serviceNUUO Camera
- CVE-2024-29892ZITADEL's actions can overload reserved claimszitadel · github.com/zitadel/zitadel
- CVE-2024-29888Saleor vulnerable to customers addresses leak when using Warehouse as a `Pickup: Local stock only` delivery methodsaleor
- CVE-2024-29886Improved security for stored password hashesserverpod
- CVE-2024-2991Tenda FH1203 WriteFacMac formWriteFacMac command injectionTenda FH1203
- CVE-2024-23451Elasticsearch Incorrect Authorization in the Remote Cluster Security API key based security modelElasticsearch · org.elasticsearch:elasticsearch
- CVE-2024-20307A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacCisco IOS
- CVE-2024-20265A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the CiscCisco IOS XE Software · Cisco Aironet Access Point Softw… +1
- CVE-2024-23450Elasticsearch Uncontrolled Resource Consumption vulnerabilityElasticsearch · org.elasticsearch:elasticsearch
- CVE-2024-20309A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to causCisco IOS XE Software
- CVE-2024-20278A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root Cisco IOS XE Software
- CVE-2024-20306A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker Cisco IOS XE Software
- CVE-2024-20324A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuratioCisco IOS XE Software
- CVE-2024-20316A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to accesCisco IOS XE Software
- CVE-2024-20354A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjCisco Aironet Access Point Software
- CVE-2024-20333A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remCisco Digital Network Architecture Center
- CVE-2024-2982Tenda FH1202 WriteFacMac formWriteFacMac command injectionTenda FH1202
- CVE-2024-26652net: pds_core: Fix possible double free in error handling pathLinux
- CVE-2024-26651sr9800: Add check for usbnet_get_endpointsLinux
- CVE-2022-45847WordPress Countdown Widget plugin <= 3.1.9.1 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)WPAssist.me WordPress Countdown Widget
- CVE-2024-23510WordPress Don't Muck My Markup plugin <= 1.8 - Cross Site Request Forgery (CSRF) vulnerabilityMartyn Chamberlin Don't Muck My Markup
- CVE-2024-23515WordPress Cincopa video and media plugin <= 1.159 - Cross Site Request Forgery (CSRF) vulnerabilityCincopa Post Video Players
- CVE-2023-44999WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerabilityWooCommerce Stripe Payment Gateway
- CVE-2023-34020WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerabilityUncanny Owl Uncanny Toolkit for LearnDash
- CVE-2024-28852Ampache has multiple reflective XSS vulnerabilitiesampache
- CVE-2024-28853Ampache Stored XSSampache
- CVE-2024-29761WordPress WP Post Disclaimer plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityKrunal Prajapati WP Post Disclaimer
- CVE-2024-29762WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.1 - Cross Site Scripting (XSS) vulnerabilityJory Hogeveen Off-Canvas Sidebars & Menus
- CVE-2024-29764WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerabilityMolongui
- CVE-2024-29765WordPress Aparat for WordPress plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityAlireza Sedghi Aparat for WordPress
- CVE-2024-29766WordPress StreamWeasels Twitch Integration plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityStreamWeasels Twitch Integration
- CVE-2024-29768WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra
- CVE-2024-29769WordPress Portfolio Gallery plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerabilityPortfolio Gallery – Image Gallery Plugin
- CVE-2024-27091GeoNode stored XSS to full account takeovergeonode
- CVE-2024-29771WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitySoftLab Dracula Dark Mode - The Revolutionary Dark Mode Plu…
- CVE-2024-29772WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerabilityStormhill Media MyBookTable Bookstore
- CVE-2024-29775WordPress Frontend Dashboard plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityvinoth06. Frontend Dashboard
- CVE-2024-29776WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerabilityMetagauss EventPrime
- CVE-2024-29788WordPress Podlove Web Player plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerabilityPodlove Web Player
- CVE-2024-29789WordPress OneClick Chat to Order plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityWalter Pinem OneClick Chat to Order
- CVE-2024-27270IBM WebSphere Application Server Liberty cross-site scriptingIBM WebSphere Application Server Liberty
- CVE-2024-29793WordPress MailChimp Forms by MailMunch plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityMailChimp Forms by MailMunch
- CVE-2023-50961IBM QRadar cross-site scriptingIBM QRadar SIEM
- CVE-2024-28784IBM QRadar cross-site scriptingIBM QRadar SIEM
- CVE-2024-29795WordPress Media Cloud for Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.5.24 - Cross Site Scripting (XSS) vulnerabilityInterfacelab Media Cloud for Amazon S3, Imgix, Google Cloud…
- CVE-2024-29796WordPress Hot Random Image plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerabilityHot Themes Hot Random Image
- CVE-2024-29797WordPress Grid Shortcodes plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityWP Darko Grid Shortcodes
- CVE-2024-29798WordPress Gratisfaction plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerabilityAppsmav Gratisfaction
- CVE-2024-29799WordPress WP Fast Total Search plugin <= 1.59.211 - Cross Site Scripting (XSS) vulnerabilityEpsiloncool WP Fast Total Search
- CVE-2024-29801WordPress Fullscreen Galleria plugin <= 1.6.11 - Cross Site Scripting (XSS) vulnerabilityPetri Damstén Fullscreen Galleria
- CVE-2024-29802WordPress Football Pool plugin <= 2.11.3 - Cross Site Scripting (XSS) vulnerabilityAntoine Hurkmans Football Pool
- CVE-2024-29803WordPress FlatPM plugin < 3.1.05 - Cross Site Scripting (XSS) vulnerabilityMehanoid.pro FlatPM
- CVE-2024-29804WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerabilityTeam Heateor Fancy Comments WordPress
- CVE-2024-29807WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerabilityDearHive DearFlip
- CVE-2024-29811WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerabilitySoftLab Radio Player
- CVE-2024-29812WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerabilityReviewX
- CVE-2024-29813WordPress CartFlows plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityFunnel Builder by CartFlows
- CVE-2024-29814WordPress Exchange Rates Widget plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerabilityCurrencyRate.today Exchange Rates Widget
- CVE-2024-29815WordPress WP Change Email Sender plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerabilityAminur Islam WP Change Email Sender
- CVE-2024-29816WordPress Woo Viet plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityhtdat Woo Viet
- CVE-2024-29817WordPress affiliate-toolkit – WordPress Affiliate Plugin plugin <= 3.4.5 - Cross Site Scripting (XSS) vulnerabilitySERVIT Software Solutions affiliate-toolkit
- CVE-2024-29818WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerabilityPoll Maker & Voting Plugin Team (InfoTheme) WP Poll Maker
- CVE-2024-30186WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerabilityBdThemes Prime Slider – Addons For Elementor
- CVE-2024-30185WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerabilityBdThemes Element Pack Elementor Addons
- CVE-2024-30184WordPress Popup Builder plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerabilityLooking Forward Software Incorporated. Popup Builder
- CVE-2024-30183WordPress WPBakery Page Builder Addons by Livemesh plugin <= 3.7 - Cross Site Scripting (XSS) vulnerabilityLivemesh Addons for WPBakery Page Builder
- CVE-2024-30182WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityDevItems HT Mega
- CVE-2024-30181WordPress Locatoraid Store Locator plugin <= 3.9.30 - Cross Site Scripting (XSS) vulnerabilityPlainware Locatoraid Store Locator
- CVE-2024-30180WordPress Easy Social Feed plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityEasy Social Feed
- CVE-2024-30179WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerabilityBoldThemes Bold Page Builder
- CVE-2024-30178WordPress Simply Static plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerabilitySimply Static
- CVE-2024-30177WordPress Exclusive Addons for Elementor plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerabilityExclusive Addons Elementor
- CVE-2024-29936WordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilityBlocksera Image Hover Effects – Elementor Addon
- CVE-2024-29935WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerabilitySinaExtra Sina Extension for Elementor
- CVE-2024-29934WordPress Piotnet Addons For Elementor plugin <= 2.4.25 - Cross Site Scripting (XSS) vulnerabilityPiotnet Addons For Elementor
- CVE-2024-29819WordPress WPFront Notification Bar plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilitySyam Mohan WPFront Notification Bar
- CVE-2024-29933WordPress Web Icons plugin <= 1.0.0.10 - Cross Site Scripting (XSS) vulnerabilityGhozyLab Web Icons
- CVE-2024-29932WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-29930WordPress Crypto Converter Widget plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerabilityCurrencyRate.today Crypto Converter Widget
- CVE-2024-29929WordPress WCFM plugin <= 6.7.8 - Cross Site Scripting (XSS) vulnerabilityWC Lovers WCFM – Frontend Manager for WooCommerce
- CVE-2024-2962Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorizationcodesupplyco Networker - Tech News WordPress Theme with Dar…
- CVE-2024-2466TLS certificate check bypass with mbedTLScurl
- CVE-2024-2379QUIC certificate check bypass with wolfSSLcurl
- CVE-2024-2004Usage of disabled protocolcurl
- CVE-2024-1023Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxvertx-core · Red Hat CEQ +23
- CVE-2024-2956Simple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scriptingspecialk Simple Ajax Chat – Add a Fast, Secure Chat Box
- CVE-2024-29927WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityHasTheme WishSuite
- CVE-2024-29926WordPress WC Builder plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerabilityHasThemes WC Builder
- CVE-2024-29925WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerabilitywpWax Post Grid, Slider & Carousel Ultimate
- CVE-2024-29922WordPress Slider Hero plugin <= 8.6.1 - Cross Site Scripting (XSS) vulnerabilityQuantum Cloud Slider Hero
- CVE-2024-29921WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerabilityPhoto Gallery by Supsystic
- CVE-2024-29920WordPress Move Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerabilityMoveaddons Move Addons for Elementor
- CVE-2024-29917WordPress Compact WP Audio Player plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerabilityCompact WP Audio Player
- CVE-2024-29914WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityMotoPress Stratum
- CVE-2024-29913WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityThemeum Tutor LMS Elementor Addons
- CVE-2024-29912WordPress iCalendrier plugin <= 1.80 - Cross Site Scripting (XSS) vulnerabilityBaptiste Placé iCalendrier
- CVE-2024-29911WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerabilityJewel Theme Master Addons for Elementor
- CVE-2024-29910WordPress Dropdown Multisite selector plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerabilityAlordiel Dropdown Multisite selector
- CVE-2024-29909WordPress Travelers' Map plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityCamille Verrier Travelers' Map
- CVE-2024-29908WordPress Co-marquage service-public.fr plugin <= 0.5.71 - Cross Site Scripting (XSS) vulnerabilityKienso Co-marquage service-public.fr
- CVE-2024-29820WordPress PDF Builder for WPForms plugin <= 1.2.88 - Cross Site Scripting (XSS) vulnerabilityRedNao PDF Builder for WPForms
- CVE-2024-29906WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityrealmag777 WordPress Meta Data and Taxonomies Filter
- CVE-2024-30192WordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS)GS Plugins GS Pins for Pinterest
- CVE-2024-30193WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerabilityandy_moyle Church Admin
- CVE-2024-1521Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Uploadhttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-2120Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigationhttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-2121Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-2781Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_taghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-1364Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scriptinghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-27188WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCloudways Breeze
- CVE-2024-30197WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerabilityandy_moyle Church Admin
- CVE-2024-30198WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThemeKraft BuddyForms
- CVE-2023-52228WordPress Beds24 Online Booking plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerabilityMark Kinchin Beds24 Online Booking
- CVE-2024-25920WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP SMS
- CVE-2024-2945Campcodes Online Examination System updateExaminee.php sql injectionCampcodes Online Examination System
- CVE-2024-2944Campcodes Online Examination System deleteCourseExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2943Campcodes Online Examination System deleteExamExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2942Campcodes Online Examination System deleteQuestionExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2941Campcodes Online Examination System loginExe.php sql injectionCampcodes Online Examination System
- CVE-2024-2203The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widgetposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-2139Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widgetlitonice13 Master Addons For Elementor – Widgets, Extension…
- CVE-2024-2210The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listingposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-1532A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series CMU firmware
- CVE-2024-2940Campcodes Online Examination System updateCourse.php cross site scriptingCampcodes Online Examination System
- CVE-2024-2244REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successfuHitachi Energy Asset Suite EAM
- CVE-2024-2939Campcodes Online Examination System updateExaminee.php cross site scriptingCampcodes Online Examination System
- CVE-2024-2938Campcodes Online Examination System updateCourse.php sql injectionCampcodes Online Examination System
- CVE-2024-2935SourceCodester Todo List in Kanban Board Add ToDo cross site scriptingSourceCodester Todo List in Kanban Board
- CVE-2024-2934SourceCodester Todo List in Kanban Board delete-todo.php sql injectionSourceCodester Todo List in Kanban Board
- CVE-2024-2932SourceCodester Online Chatting System update_room.php sql injectionSourceCodester Online Chatting System
- CVE-2023-25364Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks.
- CVE-2023-31854std::bad_alloc is mishandled in Precomp 0.4.8.
- CVE-2023-39804In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
- CVE-2023-40285An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices.
- CVE-2023-45913Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId().
- CVE-2023-45919Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString().
- CVE-2023-45920Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints().
- CVE-2023-45922glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute().
- CVE-2023-45925GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/
- CVE-2023-45935Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms().
- CVE-2023-46046An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file.
- CVE-2023-46048Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c.
- CVE-2023-46049LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file)
- CVE-2023-46051TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c.
- CVE-2023-46052Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file.
- CVE-2023-47438SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the proreportico-web/reportico
- CVE-2024-25392An out-of-bounds access occurs in utilities/var_export/var_export.c in RT-Thread through 5.0.2.
- CVE-2024-25394A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' chara
- CVE-2024-25580An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x bef
- CVE-2024-28085wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals t