# CVEs published 2024-05-10

104 CVEs were published on May 10, 2024: 10 critical, 18 high. Days are UTC.

- [CVE-2024-4574](https://cve.now/CVE-2024-4574.md): Graphina – Elementor Charts and Graphs \<= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, iqonicdesign Graphina – Charts and Graphs For Elementor)
- [CVE-2024-3055](https://cve.now/CVE-2024-3055.md): Unlimited Elements For Elementor (Free Widgets, Addons, Templates) \<= 1.5.102 - Authenticated (Contributor+) SQL Injection (CVSS 8.8, unitecms Unlimited Elements For Elementor)
- [CVE-2024-4430](https://cve.now/CVE-2024-4430.md): Beaver Builder \<= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute (CVSS 6.4, beaverbuilder Beaver Builder Page Builder – Drag and Drop W…)
- [CVE-2024-4417](https://cve.now/CVE-2024-4417.md): Falang multilanguage for WordPress \<= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4, sbouey Falang multilanguage for WordPress)
- [CVE-2024-4213](https://cve.now/CVE-2024-4213.md): Shopping Cart & eCommerce Store \<= 5.6.4 - Sensitive Information Exposure (CVSS 5.3, levelfourstorefront Shopping Cart & eCommerce Store)
- [CVE-2024-4413](https://cve.now/CVE-2024-4413.md): Hotel Booking Lite \<= 4.11.1 - Unauthenticated PHP Object Injection (CVSS 9.8, jetmonsters MotoPress Hotel Booking)
- [CVE-2024-4738](https://cve.now/CVE-2024-4738.md): Campcodes Legal Case Management System cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4737](https://cve.now/CVE-2024-4737.md): Campcodes Legal Case Management System vendor cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4736](https://cve.now/CVE-2024-4736.md): Campcodes Legal Case Management System tax cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-27460](https://cve.now/CVE-2024-27460.md): A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below. (CVSS 6.7, HP Plantronics Hub)
- [CVE-2024-4735](https://cve.now/CVE-2024-4735.md): Campcodes Legal Case Management System tasks cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4732](https://cve.now/CVE-2024-4732.md): Campcodes Legal Case Management System service cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4731](https://cve.now/CVE-2024-4731.md): Campcodes Legal Case Management System role cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-34079](https://cve.now/CVE-2024-34079.md): octo-sts allows unauthenticated attackers to cause unbounded CPU and memory usage (CVSS 3.7, octo-sts app · github.com/octo-sts/app)
- [CVE-2024-4730](https://cve.now/CVE-2024-4730.md): Campcodes Legal Case Management System judge cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4729](https://cve.now/CVE-2024-4729.md): Campcodes Legal Case Management System expense-type cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4701](https://cve.now/CVE-2024-4701.md): Path Traversal vulnerability via File Uploads in Genie (CVSS 9.9, Netflix Genie · com.netflix.genie:genie-web)
- [CVE-2024-4728](https://cve.now/CVE-2024-4728.md): Campcodes Legal Case Management System court cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4727](https://cve.now/CVE-2024-4727.md): Campcodes Legal Case Management System court-type cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-22345](https://cve.now/CVE-2024-22345.md): IBM TXSeries for Multiplatforms information disclosure (CVSS 6.2, IBM TXSeries for Multiplatforms)
- [CVE-2024-22344](https://cve.now/CVE-2024-22344.md): IBM TXSeries for Multiplatforms information disclosure (CVSS 6.1, IBM TXSeries for Multiplatforms)
- [CVE-2024-30055](https://cve.now/CVE-2024-30055.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2024-4726](https://cve.now/CVE-2024-4726.md): Campcodes Legal Case Management System clients cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-22343](https://cve.now/CVE-2024-22343.md): IBM TXSeries for Multiplatforms information disclosure (CVSS 4.0, IBM TXSeries for Multiplatforms)
- [CVE-2024-34310](https://cve.now/CVE-2024-34310.md): Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter. (CVSS 8.8)
- [CVE-2023-38264](https://cve.now/CVE-2023-38264.md): IBM SDK, Java Technology Edition denial of service (CVSS 5.9, IBM SDK, Java Technology Edition)
- [CVE-2023-37526](https://cve.now/CVE-2023-37526.md): HCL DRYiCE Lucy v9 (now AEX) is affected by a Cross Origin Resource Sharing (CORS) Vulnerability (CVSS 6.5, HCL Software DRYiCE Lucy)
- [CVE-2024-34359](https://cve.now/CVE-2024-34359.md): llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata (CVSS 9.7, abetlen llama-cpp-python · llama-cpp-python)
- [CVE-2024-33819](https://cve.now/CVE-2024-33819.md): Globitel KSA SpeechLog v8.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Save Query function. (CVSS 4.6)
- [CVE-2024-4725](https://cve.now/CVE-2024-4725.md): Campcodes Legal Case Management System client\_user cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-27269](https://cve.now/CVE-2024-27269.md): IBM QRadar SIEM information disclosure (CVSS 6.8, IBM QRadar SIEM)
- [CVE-2024-33818](https://cve.now/CVE-2024-33818.md): Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID parameter. (CVSS 7.5)
- [CVE-2024-4724](https://cve.now/CVE-2024-4724.md): Campcodes Legal Case Management System case-type cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-4723](https://cve.now/CVE-2024-4723.md): Campcodes Legal Case Management System case-status cross site scripting (CVSS 5.3, Campcodes Legal Case Management System)
- [CVE-2024-34199](https://cve.now/CVE-2024-34199.md): TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large (CVSS 8.6)
- [CVE-2024-34245](https://cve.now/CVE-2024-34245.md): An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in ma (CVSS 6.5)
- [CVE-2023-26566](https://cve.now/CVE-2023-26566.md): Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface (ARI), which allows remote attacke (CVSS 8.6)
- [CVE-2024-4722](https://cve.now/CVE-2024-4722.md): Campcodes Complete Web-Based School Management System index.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-34695](https://cve.now/CVE-2024-34695.md): WOWS Karma vulnerable to a post submission bounce/timing attack (CVSS 6.3, SakuraIsayeki WOWS-Karma)
- [CVE-2024-34360](https://cve.now/CVE-2024-34360.md): Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX (CVSS 8.2, spacemeshos go-spacemesh · github.com/spacemeshos/api/re… +2)
- [CVE-2024-28781](https://cve.now/CVE-2024-28781.md): IBM UrbanCode Deploy cross-site scripting (CVSS 5.4, IBM UrbanCode Deploy)
- [CVE-2024-4721](https://cve.now/CVE-2024-4721.md): Campcodes Complete Web-Based School Management System add\_student\_subject.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-34349](https://cve.now/CVE-2024-34349.md): Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel (CVSS 4.8, Sylius · sylius/sylius)
- [CVE-2024-34070](https://cve.now/CVE-2024-34070.md): Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise (CVSS 9.7, Froxlor · froxlor/froxlor)
- [CVE-2024-30801](https://cve.now/CVE-2024-30801.md): SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code vi (CVSS 5.5)
- [CVE-2024-4720](https://cve.now/CVE-2024-4720.md): Campcodes Complete Web-Based School Management System approve\_petty\_cash.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4719](https://cve.now/CVE-2024-4719.md): Campcodes Complete Web-Based School Management System delete\_record.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4044](https://cve.now/CVE-2024-4044.md): Deserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio (CVSS 7.8, NI FlexLogger · NI InstrumentStudio)
- [CVE-2024-32964](https://cve.now/CVE-2024-32964.md): lobe-chat \`/api/proxy\` endpoint Server-Side Request Forgery vulnerability (CVSS 9.0, lobehub lobe-chat · @lobehub/chat)
- [CVE-2024-33774](https://cve.now/CVE-2024-33774.md): A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup\_Wizard allows remote authenticated users to tr (CVSS 6.5)
- [CVE-2024-33773](https://cve.now/CVE-2024-33773.md): A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trig (CVSS 6.5)
- [CVE-2024-31441](https://cve.now/CVE-2024-31441.md): Arbitrary File Reading in DataEase (CVSS 7.5, dataease)
- [CVE-2024-33772](https://cve.now/CVE-2024-33772.md): A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger (CVSS 5.7)
- [CVE-2024-33771](https://cve.now/CVE-2024-33771.md): A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger (CVSS 6.5)
- [CVE-2024-4718](https://cve.now/CVE-2024-4718.md): Campcodes Complete Web-Based School Management System delete\_student\_grade\_subject.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4717](https://cve.now/CVE-2024-4717.md): Campcodes Complete Web-Based School Management System update\_classroom.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4232](https://cve.now/CVE-2024-4232.md): Password Storage in Plaintext Vulnerability in Digisol Router (CVSS 5.4, Digisol Router DG-GR1321)
- [CVE-2024-4231](https://cve.now/CVE-2024-4231.md): Incorrect Access Control Vulnerability in Digisol Router (CVSS 6.8, Digisol Router DG-GR1321)
- [CVE-2024-2257](https://cve.now/CVE-2024-2257.md): Password Policy Bypass Vulnerability in Digisol Router (CVSS 9.1, Digisol Router DG-GR1321)
- [CVE-2024-4716](https://cve.now/CVE-2024-4716.md): Campcodes Complete Web-Based School Management System update\_exam.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4693](https://cve.now/CVE-2024-4693.md): Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash (CVSS 5.5, qemu · Red Hat Enterprise Linux)
- [CVE-2024-34942](https://cve.now/CVE-2024-34942.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/gofor (CVSS 8.8)
- [CVE-2024-34943](https://cve.now/CVE-2024-34943.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/Nat (CVSS 9.8)
- [CVE-2024-34945](https://cve.now/CVE-2024-34945.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/Wiza (CVSS 9.8)
- [CVE-2024-34944](https://cve.now/CVE-2024-34944.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/Dh (CVSS 8.8)
- [CVE-2024-34946](https://cve.now/CVE-2024-34946.md): Tenda FH1206 V1.2.0.8(8155)\_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/Dhc (CVSS 6.5)
- [CVE-2024-34974](https://cve.now/CVE-2024-34974.md): Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter. (CVSS 8.2)
- [CVE-2024-22064](https://cve.now/CVE-2024-22064.md): Configuration error Vulnerability in ZTE ZXUN-ePDG (CVSS 8.3, ZTE ZXUN-ePDG)
- [CVE-2024-4715](https://cve.now/CVE-2024-4715.md): Campcodes Complete Web-Based School Management System update\_grade.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4490](https://cve.now/CVE-2024-4490.md): Elegant Themes Divi Theme, Extra Theme, Divi Page Builder \<= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, Elegant Themes Divi Builder · Elegant Themes Divi)
- [CVE-2024-4714](https://cve.now/CVE-2024-4714.md): Campcodes Complete Web-Based School Management System update\_subject.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4713](https://cve.now/CVE-2024-4713.md): Campcodes Complete Web-Based School Management System all\_teacher.php cross site scripting (CVSS 5.3, Campcodes Complete Web-Based School Management System)
- [CVE-2024-4039](https://cve.now/CVE-2024-4039.md): Orders Tracking for WooCommerce \<= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, villatheme Orders Tracking for WooCommerce)
- [CVE-2024-4277](https://cve.now/CVE-2024-4277.md): LearnPress – WordPress LMS Plugin \<= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout\_html Parameter (CVSS 6.4, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2024-32776](https://cve.now/CVE-2024-32776.md): WordPress AppPresser plugin \<= 4.3.0 - Broken Access Control vulnerability (CVSS 6.5, AppPresser Team AppPresser)
- [CVE-2024-34818](https://cve.now/CVE-2024-34818.md): WordPress Webinar plugin \<= 1.33.17 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.1, WebinarPress)
- [CVE-2024-34814](https://cve.now/CVE-2024-34814.md): WordPress Unyson plugin \<=2.7.29 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Unyson)
- [CVE-2024-34816](https://cve.now/CVE-2024-34816.md): WordPress WPCal.io plugin \<= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Revmakx WPCal.io – Easy Meeting Scheduler)
- [CVE-2024-34817](https://cve.now/CVE-2024-34817.md): WordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin \<= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, CRM Perks Integration for Pipedrive and Contact Form 7, WPF…)
- [CVE-2024-31113](https://cve.now/CVE-2024-31113.md): WordPress Easy Digital Downloads plugin \<= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Easy Digital Downloads)
- [CVE-2024-4444](https://cve.now/CVE-2024-4444.md): LearnPress – WordPress LMS Plugin \<= 4.2.6.5 - Unauthenticated Bypass to User Registration (CVSS 5.3, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2024-3956](https://cve.now/CVE-2024-3956.md): Pods – Custom Content Types and Fields \<= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL (CVSS 5.4, sc0ttkclark Pods – Custom Content Types and Fields)
- [CVE-2024-4434](https://cve.now/CVE-2024-4434.md): LearnPress – WordPress LMS Plugin \<= 4.2.6.5 - Unauthenticated Time-Based SQL Injection (CVSS 9.8, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2024-4689](https://cve.now/CVE-2024-4689.md): WordPress ShortPixel Adaptive Images plugin \<= 3.8.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, ShortPixel Adaptive Images)
- [CVE-2024-34823](https://cve.now/CVE-2024-34823.md): WordPress Arigato Autoresponder and Newsletter plugin \<= 2.7.2.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Kiboko Labs Arigato Autoresponder and Newsletter)
- [CVE-2024-34825](https://cve.now/CVE-2024-34825.md): WordPress Social Warfare plugin \<= 4.4.5.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Warfare Plugins Social Warfare)
- [CVE-2024-34827](https://cve.now/CVE-2024-34827.md): WordPress Translate Multilingual sites – TranslatePress plugin \<= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Cozmoslabs, Razvan Mocanu, Madalin Ungureanu, Cristophor Hu…)
- [CVE-2024-34828](https://cve.now/CVE-2024-34828.md): WordPress Church Admin plugin \<= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, andy\_moyle Church Admin)
- [CVE-2024-3547](https://cve.now/CVE-2024-3547.md): Unlimited Elements For Elementor (Free Widgets, Addons, Templates) \<= 1.5.102 - Reflected Cross-Site Scripting (CVSS 6.1, unitecms Unlimited Elements For Elementor)
- [CVE-2024-4398](https://cve.now/CVE-2024-4398.md): HTML5 Audio Player- Best WordPress Audio Player Plugin \<= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, bplugins HTML5 Audio Player – The Ultimate No-Code Podcast,…)
- [CVE-2024-4275](https://cve.now/CVE-2024-4275.md): Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles' (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-2662](https://cve.now/CVE-2024-2662.md): Unlimited Elements For Elementor (Free Widgets, Addons, Templates) \<= 1.5.102 - Authenticated (Admin+) Command Injection (CVSS 7.2, unitecms Unlimited Elements For Elementor)
- [CVE-2024-4449](https://cve.now/CVE-2024-4449.md): Essential Addons for Elementor \<= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-4448](https://cve.now/CVE-2024-4448.md): Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders \<= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table' (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2024-4129](https://cve.now/CVE-2024-4129.md): Authentication bypass in Snow License Manager (CVSS 8.8, Snow Software AB Snow License Manager)
- [CVE-2024-3828](https://cve.now/CVE-2024-3828.md): Spectra Pro \<= 1.1.5 - Authenticated (Author+) Privilege Escalation (CVSS 8.8, Brainstorm Force Spectra Pro)
- [CVE-2024-4481](https://cve.now/CVE-2024-4481.md): Gutenberg Blocks with AI by Kadence WP \<= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Link (CVSS 6.4, stellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…)
- [CVE-2024-3941](https://cve.now/CVE-2024-3941.md): reCAPTCHA Jetpack \<= 0.2.2 - Stored XSS via CSRF (CVSS 4.7, reCAPTCHA Jetpack)
- [CVE-2024-3940](https://cve.now/CVE-2024-3940.md): reCAPTCHA Jetpack \<= 0.2.2 - Settings Update via CSRF (CVSS 8.8, reCAPTCHA Jetpack)
- [CVE-2024-2749](https://cve.now/CVE-2024-2749.md): VikBooking \< 1.6.8 - Broken Access Control (CVSS 5.9, VikBooking Hotel Booking Engine & PMS)
- [CVE-2024-2441](https://cve.now/CVE-2024-2441.md): VikBooking \< 1.6.8 - Insecure Direct Object References (CVSS 8.1, VikBooking Hotel Booking Engine & PMS)
- [CVE-2024-4280](https://cve.now/CVE-2024-4280.md): White Label CMS \<= 2.7.3 - Missing Authorization to Plugin Settings Reset (CVSS 5.3, videousermanuals White Label CMS)
- [CVE-2024-4699](https://cve.now/CVE-2024-4699.md): D-Link DAR-8000-10 importhtml.php deserialization (CVSS 5.3, D-Link DAR-8000-10)
- [CVE-2024-30802](https://cve.now/CVE-2024-30802.md): An issue in Vehicle Management System 7.31.0.3\_20230412 allows an attacker to escalate privileges via the login.html component. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-05-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.