|
High
|
1 Sep 2024 |
1 Sep 2024 |
CPAI-2024-0741
|
|
CVE-2024-6411
|
WordPress ProfileGrid Plugin Privilege Escalation (CVE-2024-6411)
|
|
High
|
29 Aug 2024 |
29 Aug 2024 |
CPAI-2024-0734
|
|
|
YiSaiTong SQL Injection
|
|
High
|
19 Aug 2024 |
29 Aug 2024 |
CPAI-2024-0712
|
|
|
Landray OA Remote Code Execution
|
|
High
|
29 Aug 2024 |
29 Aug 2024 |
CPAI-2024-0686
|
|
CVE-2024-6366
|
WordPress User Profile Builder Plugin Arbitrary File Upload (CVE-2024-6366)
|
|
Critical
|
29 Aug 2024 |
29 Aug 2024 |
CPAI-2021-2137
|
|
CVE-2021-33044
|
Dahua Security Multiple Products Authentication Bypass (CVE-2021-33044)
|
|
High
|
29 Aug 2024 |
29 Aug 2024 |
CPAI-2023-0532
|
|
CVE-2023-27978
|
Schneider Electric Multiple Products Insecure Deserialization (CVE-2023-27978)
|
|
High
|
28 Aug 2024 |
28 Aug 2024 |
CPAI-2024-0748
|
|
CVE-2024-30850
|
CHAOS RAT Command Injection (CVE-2024-30850)
|
|
Critical
|
28 Aug 2024 |
28 Aug 2024 |
CPAI-2022-2118
|
|
CVE-2022-47071
|
NVS365 V01 Command Injection (CVE-2022-47071)
|
|
High
|
28 Aug 2024 |
28 Aug 2024 |
CPAI-2024-0732
|
|
CVE-2024-28741
|
NorthStar C2 Remote Code Execution (CVE-2024-28741)
|
|
Critical
|
28 Aug 2024 |
28 Aug 2024 |
CPAI-2024-0726
|
|
CVE-2024-25830
|
F-logic DataCube3 Information Disclosure (CVE-2024-25830)
|
|
High
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2024-0743
|
|
CVE-2024-39123
|
Calibre-Web Cross-Site Scripting (CVE-2024-39123)
|
|
Critical
|
22 Aug 2024 |
27 Aug 2024 |
CPAI-2024-0728
|
|
CVE-2024-28000
|
WordPress LiteSpeed Cache Plugin Privilege Escalation (CVE-2024-28000)
|
|
High
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2020-4196
|
|
CVE-2020-17525
|
Apache Subversion Denial of Service (CVE-2020-17525)
|
|
High
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2023-1879
|
|
CVE-2023-50564
|
Pluck CMS Arbitrary File Upload (CVE-2023-50564)
|
|
Medium
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2021-2203
|
|
CVE-2021-22784
|
Schneider Electric C-Bus Toolkit Authentication Bypass (CVE-2021-22784)
|
|
High
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2024-0598
|
|
CVE-2024-5276
|
Fortra FileCatalyst Workflow SQL Injection (CVE-2024-5276)
|
|
High
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2021-1785
|
|
CVE-2021-22824
|
Schneider-Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2021-22824)
|
|
Critical
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2022-1574
|
|
CVE-2022-24313
|
Schneider-Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2022-24313)
|
|
High
|
27 Aug 2024 |
27 Aug 2024 |
CPAI-2022-1564
|
|
CVE-2022-24315
|
Schneider-Electric Interactive Graphical SCADA System Out-of-bounds Read (CVE-2022-24315)
|
|
High
|
26 Aug 2024 |
26 Aug 2024 |
CPAI-2024-0719
|
|
CVE-2024-29276
|
Seeyon OA Arbitrary File Upload (CVE-2024-29276)
|
|
Critical
|
26 Aug 2024 |
26 Aug 2024 |
CPAI-2024-0718
|
|
|
Zhiyuan A8 OA Remote Code Execution
|
|
Critical
|
26 Aug 2024 |
26 Aug 2024 |
CPAI-2023-1878
|
|
CVE-2023-40504
|
LG Simple Editor Command Injection (CVE-2023-40504)
|
|
High
|
26 Aug 2024 |
26 Aug 2024 |
CPAI-2023-1877
|
|
CVE-2023-49964
|
Hyland Alfresco Server-Side Template Injection (CVE-2023-49964)
|
|
High
|
26 Aug 2024 |
26 Aug 2024 |
CPAI-2022-2090
|
|
CVE-2022-28685
|
AVEVA Edge Insecure Deserialization (CVE-2022-28685)
|
|
High
|
26 Aug 2024 |
26 Aug 2024 |
CPAI-2023-0365
|
|
CVE-2023-28400
|
MySCADA MyPRO Command Injection (CVE-2023-28400)
|
|
High
|
8 Feb 2024 |
22 Aug 2024 |
CPAI-2016-1253
|
|
CVE-2016-8525
CVE-2016-8530
|
HP Intelligent Management Center Denial of Service (CVE-2016-8530; CVE-2016-8525)
|
|
Medium
|
22 Aug 2024 |
22 Aug 2024 |
CPAI-2021-2204
|
|
CVE-2021-38488
|
Delta DIALink Cross-Site Scripting (CVE-2021-38488)
|
|
Medium
|
22 Aug 2024 |
22 Aug 2024 |
CPAI-2024-0714
|
|
CVE-2023-4119
CVE-2023-4973
CVE-2024-38959
|
WordPress Academy LMS Plugin Cross-Site Scripting (CVE-2023-4119; CVE-2023-4973; CVE-2024-38959)
|
|
Medium
|
22 Aug 2024 |
22 Aug 2024 |
CPAI-2021-2202
|
|
CVE-2021-30214
|
Knowage Suite Client-Side Template Injection (CVE-2021-30214)
|
|
Critical
|
22 Aug 2024 |
22 Aug 2024 |
CPAI-2023-1872
|
|
CVE-2023-0587
|
Trend Micro Apex One Arbitrary File Upload (CVE-2023-0587)
|
|
High
|
22 Aug 2024 |
22 Aug 2024 |
CPAI-2022-1603
|
|
CVE-2022-36969
|
AVEVA Edge XML External Entity Injection (CVE-2022-36969)
|
|
High
|
21 Aug 2024 |
21 Aug 2024 |
CPAI-2022-2116
|
|
CVE-2022-45835
|
WordPress PhonePe Plugin Server-Side Request Forgery (CVE-2022-45835)
|
|
Medium
|
21 Aug 2024 |
21 Aug 2024 |
CPAI-2022-2115
|
|
CVE-2022-45365
|
WordPress Urosevic Stock Ticker Plugin Cross-Site Scripting (CVE-2022-45365)
|
|
Critical
|
21 Aug 2024 |
21 Aug 2024 |
CPAI-2020-4195
|
|
CVE-2020-23584
|
OptilinkNetwork OP-XT71000n Command Injection (CVE-2020-23584)
|
|
Critical
|
21 Aug 2024 |
21 Aug 2024 |
CPAI-2022-2114
|
|
CVE-2022-45551
|
ZBT WE1626 Privilege Escalation (CVE-2022-45551)
|
|
Critical
|
21 Aug 2024 |
21 Aug 2024 |
CPAI-2024-0713
|
|
CVE-2024-41468
CVE-2024-41473
|
Tenda FH1201 Command Injection (CVE-2024-41468; CVE-2024-41473)
|
|
Critical
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2024-0710
|
|
CVE-2024-7094
|
WordPress JS Help Desk Plugin Remote Code Execution (CVE-2024-7094)
|
|
High
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2018-2788
|
|
CVE-2018-0824
|
Microsoft Windows Remote Code Execution (CVE-2018-0824)
|
|
High
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2024-0707
|
|
CVE-2024-38472
|
Apache HTTP Server Server-Side Request Forgery (CVE-2024-38472)
|
|
High
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2014-2624
|
|
CVE-2014-0160
|
OpenSSL Information Disclosure (CVE-2014-0160)
|
|
Medium
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2024-0699
|
|
CVE-2024-2651
|
GitLab Community and Enterprise Edition Denial Of Service (CVE-2024-2651)
|
|
Critical
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2023-1871
|
|
CVE-2023-6016
|
H2O.ai H2O-3 Arbitrary File Upload (CVE-2023-6016)
|
|
High
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2024-0667
|
|
CVE-2024-5246
|
Netgear ProSAFE NMS300 Remote Code Execution (CVE-2024-5246)
|
|
Medium
|
20 Aug 2024 |
20 Aug 2024 |
CPAI-2023-1868
|
|
CVE-2023-0678
|
Phpipam Authentication Bypass (CVE-2023-0678)
|
|
Critical
|
28 Jan 2024 |
20 Aug 2024 |
CPAI-2024-0020
|
|
CVE-2024-23897
|
Jenkins Information Disclosure (CVE-2024-23897)
|
|
High
|
19 Aug 2024 |
19 Aug 2024 |
CPAI-2024-0708
|
|
CVE-2024-1222
|
PaperCut NG Authentication Bypass (CVE-2024-1222)
|
|
Critical
|
19 Aug 2024 |
19 Aug 2024 |
CPAI-2023-1876
|
|
CVE-2023-30145
|
Camaleon CMS Server-Side Template Injection (CVE-2023-30145)
|
|
High
|
19 Aug 2024 |
19 Aug 2024 |
CPAI-2023-1875
|
|
CVE-2023-32529
CVE-2023-32530
|
Trend Micro Apex Central SQL Injection (CVE-2023-32529; CVE-2023-32530)
|
|
Medium
|
19 Aug 2024 |
19 Aug 2024 |
CPAI-2024-0683
|
|
CVE-2024-37900
|
XWiki.org XWiki Reflected Cross-Site Scripting (CVE-2024-37900)
|
|
High
|
19 Aug 2024 |
19 Aug 2024 |
CPAI-2023-1764
|
|
CVE-2023-38171
|
Microsoft Multiple Products Denial of Service (CVE-2023-38171)
|
Feedback