CVEs published April 16, 2024
243 CVEs were published on April 16, 2024: 19 critical, 77 high.
- Published
- 243
- Critical
- 19
- High
- 77
- Medium
- 127
- Low
- 19
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 80
Most affected products
- Oracle Complex Maintenance, Repair, and Overhaul
- 31
- Oracle MySQL Server
- 24
- Oracle VM VirtualBox
- 13
- Oracle Java SE JDK and JRE
- 9
- Mozilla Firefox · Mozilla Thunderbird
- 8
- Mozilla Firefox
- 7
- bmaltais kohya_ss
- 6
- mlflow/mlflow · mlflow
- 6
- net-snmp
- 6
- Oracle Trade Management
- 5
Critical 19
- CVE-2024-21082Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services).Oracle BI Publisher
- CVE-2024-21071Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI).Oracle Workflow
- CVE-2024-21014Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).Oracle Hospitality Simphony
- CVE-2024-21010Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).Oracle Hospitality Simphony
- CVE-2024-20997Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server).Oracle Hospitality Simphony
- CVE-2024-3660Arbitrary code injection vulnerability in Keras framework < 2.13tensorflow keras · keras
- CVE-2024-3863The executable file warning was not presented when downloading .xrm-ms files.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-32022Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)bmaltais kohya_ss
- CVE-2024-32027Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)bmaltais kohya_ss
- CVE-2024-32026Kohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)bmaltais kohya_ss
- CVE-2024-32025Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)bmaltais kohya_ss
- CVE-2024-3871Authenticated Remote Command Injection in Delta Electronics DVWDeltra Electronics DVW-W02W2-E2
- CVE-2024-2083Directory Traversal in zenml-io/zenmlzenml-io/zenml · zenml
- CVE-2024-2912Insecure Deserialization Leading to RCE in bentoml/bentomlbentoml/bentoml · bentoml
- CVE-2024-3271Command Injection in run-llama/llama_indexrun-llama/llama_index · llama-index-core
- CVE-2024-3573Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-3029Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2024-1626IDOR Vulnerability in lunary-ai/lunarylunary-ai/lunary
- CVE-2024-0404Mass Assignment Vulnerability in mintplex-labs/anything-llmmintplex-labs/anything-llm
High 77
- CVE-2024-31452OpenFGA Authorization Bypassopenfga · github.com/openfga/openfga
- CVE-2024-21116Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21115Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21114Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21113Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21112Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21111Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21110Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21103Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21095Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2024-21092Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality ManageOracle Agile Product Lifecycle Management for Process
- CVE-2024-21090Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python).Oracle MySQL Connectors
- CVE-2024-21088Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Import Utility).Oracle Production Scheduling
- CVE-2024-21083Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Script Engine).Oracle BI Publisher
- CVE-2024-21079Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV).Oracle Marketing
- CVE-2024-21078Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV).Oracle Marketing
- CVE-2024-21077Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts LOV).Oracle Trade Management
- CVE-2024-21076Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Offer LOV).Oracle Trade Management
- CVE-2024-21075Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim Line LOV).Oracle Trade Management
- CVE-2024-21074Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Finance LOV).Oracle Trade Management
- CVE-2024-21073Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).Oracle Trade Management
- CVE-2024-21067Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management).Oracle Enterprise Manager Base Platform
- CVE-2024-21059Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris Operating System
- CVE-2024-21007Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-21006Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2024-20999Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones).Oracle Solaris Operating System
- CVE-2024-20989Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony POS).Oracle Hospitality Simphony
- CVE-2024-31887IBM Security Verify Privilege information disclosureIBM Security Verify Privilege
- CVE-2024-3882Tenda W30E fromRouteStatic stack-based overflowTenda W30E
- CVE-2024-3881Tenda W30E frmL7ProtForm frmL7PlotForm stack-based overflowTenda W30E
- CVE-2024-31446OpenComputers Denial of Service using xpcallMightyPirates OpenComputers
- CVE-2023-51391Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerabilitysilabs.com Gecko SDK
- CVE-2024-3879Tenda W30E setcfm formSetCfm stack-based overflowTenda W30E
- CVE-2024-25911WordPress MoveTo plugin <= 6.2 - Unauthenticated Arbitrary File Deletion vulnerabilitySkymoon Labs MoveTo
- CVE-2024-3878Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowTenda F1202
- CVE-2024-3877Tenda F1202 fromqossetting stack-based overflowTenda F1202
- CVE-2024-3876Tenda F1202 VirtualSer fromVirtualSer stack-based overflowTenda F1202
- CVE-2024-3875Tenda F1202 Natlimit fromNatlimit stack-based overflowTenda F1202
- CVE-2023-45000WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerabilityLiteSpeed Technologies LiteSpeed Cache
- CVE-2023-40000WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerabilityLiteSpeed Technologies LiteSpeed Cache
- CVE-2024-32086WordPress Citadela Listing plugin <= 5.18.1 - Unauth. Sensitive Data Exposure vulnerabilityAitThemes Citadela Listing
- CVE-2024-3874Tenda W20E SetRemoteWebManage formSetRemoteWebManage stack-based overflowTenda W20E
- CVE-2024-3865Memory safety bugs present in Firefox 124.Mozilla Firefox
- CVE-2024-3864Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-3858It was possible to mutate a JavaScript object so that the JIT could crash while tracing it.Mozilla Firefox
- CVE-2024-3857The JIT created incorrect code for arguments in certain cases.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-3856A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array.Mozilla Firefox
- CVE-2024-3854In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-3853A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started.Mozilla Firefox
- CVE-2024-3852GetBoundName could return the wrong version of an object when JIT optimizations were applied.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-3067WooCommerce Google Feed Manager <= 2.4.2 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scriptingaukejomm WPMR Google Feed Manager for WooCommerce – Sell on…
- CVE-2024-32631Out-of-bounds read in telephonyASR Falcon/Crane
- CVE-2024-22262CVE-2024-22262: Spring Framework URL Parsing with Host ValidationSpring Framework · org.springframework:spring-web
- CVE-2024-1561Arbitrary Local File Read via Component Method Invocation in gradio-app/gradiogradio-app/gradio · gradio
- CVE-2024-1961Path Traversal leading to Arbitrary File Write and RCE in vertaai/modeldbvertaai/modeldb
- CVE-2024-1739Case Insensitive Email Address Validation Vulnerability in lunary-ai/lunarylunary-ai/lunary
- CVE-2024-3574Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapyscrapy/scrapy · scrapy
- CVE-2024-1135HTTP Request Smuggling in benoitc/gunicornbenoitc/gunicorn · gunicorn
- CVE-2024-1558Path Traversal Vulnerability in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-1594Local File Read via Path Traversal in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-3572XML External Entity (XXE) Vulnerability in scrapy/scrapyscrapy/scrapy · scrapy
- CVE-2024-1738Incorrect Authorization in lunary-ai/lunarylunary-ai/lunary
- CVE-2024-1601SQL Injection in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-1646Authentication Bypass in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-0549Relative Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2024-1593Path Traversal via Parameter Smuggling in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-3028Improper Input Validation in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2024-1483Path Traversal Vulnerability in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-1666Unauthorized Radar Creation in lunary-ai/lunarylunary-ai/lunary
- CVE-2024-1560Path Traversal Vulnerability in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-1456S3 Bucket Takeover in h2oai/h2o-3h2oai/h2o-3
- CVE-2023-50872The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information
- CVE-2024-31503Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookidolibarr/dolibarr
- CVE-2024-31680File Upload vulnerability in Shibang Communications Co., Ltd.
- CVE-2024-31759An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function.
- CVE-2024-32254Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via tms/admin/create-package.php.
- CVE-2024-32256Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php.
Medium, low and unrated 147
- CVE-2024-27086MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of serviceAzureAD microsoft-authentication-library-for-dotnet · Micro…
- CVE-2024-21121Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21120Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2024-21119Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2024-21118Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2024-21117Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).Oracle Outside In Technology
- CVE-2024-21109Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21108Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21107Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21106Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2024-21105Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris Operating System
- CVE-2024-21104Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2024-21102Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).Oracle MySQL NDB Cluster · Oracle MySQL Server
- CVE-2024-21101Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL NDB Cluster
- CVE-2024-21100Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Platform).Oracle Commerce Platform
- CVE-2024-21099Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Data Visualization).Oracle Business Intelligence Enterprise Edition
- CVE-2024-21098Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2024-21097Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21096Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump).Oracle MySQL Server
- CVE-2024-21094Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21093Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21091Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Data Import).Oracle Agile Product Lifecycle Management for Process
- CVE-2024-21089Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling).Oracle Concurrent Processing
- CVE-2024-21087Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2024-21086Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2024-21085Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).Oracle Java SE JDK and JRE
- CVE-2024-21084Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Service Gateway).Oracle BI Publisher
- CVE-2024-21081Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup).Oracle Partner Management
- CVE-2024-21080Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services).Oracle Applications Framework
- CVE-2024-21072Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI).Oracle Installed Base
- CVE-2024-21070Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21069Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2024-21068Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21066Vulnerability in the RDBMS component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21065Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2024-21064Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers).Oracle Business Intelligence Enterprise Edition
- CVE-2024-21063Vulnerability in the PeopleSoft Enterprise HCM Benefits Administration product of Oracle PeopleSoft (component: Benefits Administration).Oracle PeopleSoft Enterprise HCM Benefits Administration
- CVE-2024-21062Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21061Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in).Oracle MySQL Server
- CVE-2024-21060Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary).Oracle MySQL Server
- CVE-2024-21058Vulnerability in the Unified Audit component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-21057Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21056Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21055Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21054Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21053Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21052Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21051Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21050Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21049Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21048Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: XML input).Oracle Web Applications Desktop Integrator
- CVE-2024-21047Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2024-21046Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21045Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21044Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21043Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21042Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21041Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21040Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21039Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21038Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21037Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21036Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21035Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21034Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21033Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21032Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21031Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21030Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21029Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21028Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21027Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21026Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21025Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21024Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21023Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21022Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21021Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21020Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21019Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21018Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21017Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21016Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV).Oracle Complex Maintenance, Repair, and Overhaul
- CVE-2024-21015Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2024-21013Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21012Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: NetworkOracle Java SE JDK and JRE
- CVE-2024-21011Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2024-21009Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21008Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-21005Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE
- CVE-2024-21004Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE
- CVE-2024-21003Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE
- CVE-2024-21002Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE
- CVE-2024-21001Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2024-21000Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2024-20998Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20995Vulnerability in the Oracle Database Sharding component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2024-20994Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2024-20993Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2024-20992Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration).Oracle WebCenter Portal
- CVE-2024-20991Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).Oracle HTTP Server
- CVE-2024-20990Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Templates).Oracle E-Business Suite Technology Stack
- CVE-2024-20954Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).Oracle GraalVM
- CVE-2024-30380Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLVJuniper Networks Junos OS
- CVE-2024-30378Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commandsJuniper Networks Junos OS
- CVE-2022-24810net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.net-snmp
- CVE-2022-24809net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferencenet-snmp
- CVE-2022-24808net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferencenet-snmp
- CVE-2022-24807net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory accessnet-snmp
- CVE-2022-24806net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneouslynet-snmp
- CVE-2022-24805net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.net-snmp
- CVE-2024-3880Tenda W30E WriteFacMac formWriteFacMac os command injectionTenda W30E
- CVE-2024-32455WordPress Fatal Error Notify plugin <= 1.5.2 - Broken Access Control vulnerabilityVery Good Plugins Fatal Error Notify
- CVE-2024-3873SMI SMI-EX-5414W Web Interface cross-site request forgerySMI-EX-5414W
- CVE-2024-3302There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-3862The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment.Mozilla Firefox
- CVE-2024-3861If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free.Mozilla Firefox · Mozilla Thunderbird
- CVE-2024-3860An out-of-memory condition during object initialization could result in an empty shape list.Mozilla Firefox
- CVE-2024-3859On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenTypMozilla Firefox · Mozilla Thunderbird
- CVE-2024-3855In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads.Mozilla Firefox
- CVE-2024-32024Kohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function (`GHSL-2024-023`)bmaltais kohya_ss
- CVE-2024-32023Kohya_ss vulnerable to path injection in `common_gui.py` `find_and_replace` function (`GHSL-2024-024`)bmaltais kohya_ss
- CVE-2024-31451Limited file write in routes.py (GHSL-2023-250)arc53 DocsGPT
- CVE-2024-30256Open WebUI vulnerable to server-side request forgery in utils.pyopen-webui
- CVE-2024-3672BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodebookingalgorithms BA Book Everything
- CVE-2024-3243Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sendingivole Customer Reviews for WooCommerce
- CVE-2024-3869Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Searchivole Customer Reviews for WooCommerce
- CVE-2024-3367Argument injection to runmqscCheckmk
- CVE-2024-1357Shortcodes and extra features for Phlox theme <= 2.15.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aux_timeline' Shortcodeaverta Shortcodes and extra features for Phlox theme
- CVE-2024-3867Tainacan Interface <= 2.7.2 - Reflected Cross-Site ScriptingTainacan Interface
- CVE-2024-3872Mattermost Mobile app versions 2.13.0 and earlier use a regular expression with polynomial complexity to parse certain deeplinks, which alloMattermost
- CVE-2024-32625Uninitialized scalar fieldASR Falcon/Crane
- CVE-2024-32634Logically dead codeASR Falcon
- CVE-2024-32633Unsigned compared against 0ASR Falcon/Crane
- CVE-2024-32632Printf arg type mismatch in ATCMDASR Falcon/Crane
- CVE-2024-32557WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerabilityExclusive Addons Elementor
- CVE-2024-3571Path Traversal in langchain-ai/langchainlangchain-ai/langchain · langchain
- CVE-2024-2260Session Fixation Vulnerability in zenml-io/zenmlzenml-io/zenml · zenml
- CVE-2024-1569Uncontrolled Resource Consumption in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-1183SSRF Vulnerability in gradio-app/gradiogradio-app/gradio · gradio
- CVE-2024-3575Cross-site Scripting (XSS) - Stored in mindsdb/mindsdbmindsdb/mindsdb · mindsdb
- CVE-2024-29291An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log.
- CVE-2024-29402cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity.
- CVE-2024-31634Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Se
- CVE-2024-31760An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component.
- CVE-2024-31783Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted
- CVE-2024-31784An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted pay