|
Critical
|
2 Dec 2024 |
15 Sep 2026 |
CPAI-2024-8572
|
|
CVE-2024-8191
|
Ivanti Endpoint Manager SQL Injection (CVE-2024-8191)
|
|
Critical
|
5 Aug 2024 |
7 Sep 2026 |
CPAI-2024-8510
|
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533
|
Embedded Devices Web Servers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533)
|
|
Critical
|
5 Nov 2024 |
31 Aug 2026 |
CPAI-2024-1041
|
|
CVE-2024-8957
|
PTZOptics PT30X Command Injection (CVE-2024-8957)
|
|
Critical
|
8 Oct 2024 |
27 Aug 2026 |
CPAI-2026-10781
|
|
CVE-2024-45519
CVE-2026-73570
|
Zimbra Collaboration Remote Command Execution (CVE-2024-45519; CVE-2026-73570)
|
|
Critical
|
8 Oct 2024 |
26 Aug 2026 |
CPAI-2026-10600
|
|
CVE-2024-45519
CVE-2026-73570
|
Zimbra Collaboration Remote Command Execution (CVE-2024-45519; CVE-2026-73570)
|
|
Critical
|
8 Oct 2024 |
25 Aug 2026 |
CPAI-2026-10553
|
|
CVE-2024-45519
CVE-2026-73570
|
Zimbra Collaboration Remote Command Execution (CVE-2024-45519; CVE-2026-73570)
|
|
Critical
|
5 Sep 2024 |
24 Aug 2026 |
CPAI-2024-0772
|
|
CVE-2024-6670
CVE-2024-6671
|
Progress Software WhatsUp Gold SQL Injection (CVE-2024-6670; CVE-2024-6671)
|
|
Critical
|
10 Jul 2024 |
12 Aug 2026 |
CPAI-2024-8432
|
|
CVE-2024-36401
|
GeoServer Remote Code Execution (CVE-2024-36401)
|
|
Critical
|
7 Aug 2024 |
11 Aug 2026 |
CPAI-2024-8428
|
|
CVE-2024-38856
|
Apache OFBiz Remote Code Execution (CVE-2024-38856)
|
|
Critical
|
8 Aug 2024 |
11 Aug 2026 |
CPAI-2024-8426
|
|
CVE-2024-7314
|
Anji-plus AJ-Report Authentication Bypass (CVE-2024-7314)
|
|
Critical
|
5 Aug 2024 |
10 Aug 2026 |
CPAI-2024-8406
|
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533
|
Embedded Devices Web Servers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533)
|
|
Critical
|
5 Nov 2024 |
10 Aug 2026 |
CPAI-2024-1036
|
|
CVE-2024-51567
CVE-2024-51568
|
CyberPanel Command Injection (CVE-2024-51567; CVE-2024-51568)
|
|
Critical
|
7 Aug 2024 |
10 Aug 2026 |
CPAI-2024-0626
|
|
CVE-2024-4885
|
Progress WhatsUp Gold Remote Code Execution (CVE-2024-4885)
|
|
Critical
|
17 Jun 2024 |
10 Aug 2026 |
CPAI-2024-8405
|
|
CVE-2024-27348
|
Apache HugeGraph Remote Code Execution (CVE-2024-27348)
|
|
Critical
|
3 Jan 2024 |
10 Aug 2026 |
CPAI-2023-5262
|
|
CVE-2023-51467
|
Apache OFBiz Authentication Bypass (CVE-2023-51467)
|
|
Critical
|
31 Mar 2024 |
3 Aug 2026 |
CPAI-2026-8164
|
|
CVE-2024-1212
CVE-2026-8037
|
Progress Kemp LoadMaster Command Injection (CVE-2024-1212; CVE-2026-8037)
|
|
High
|
7 Jan 2024 |
28 Jul 2026 |
CPAI-2023-5232
|
|
CVE-2023-2766
|
Weaver Office Automation Authentication Bypass (CVE-2023-2766)
|
|
Critical
|
26 Mar 2024 |
28 Jul 2026 |
CPAI-2026-9686
|
|
|
Python Functions Remote Code Execution
|
|
High
|
10 Jul 2024 |
20 Jul 2026 |
CPAI-2024-0560
|
|
CVE-2024-36991
|
Splunk Enterprise Path Traversal (CVE-2024-36991)
|
|
Critical
|
18 Apr 2024 |
9 Jul 2026 |
CPAI-2023-1637
|
|
CVE-2023-6895
|
Hikvision Intercom Broadcasting System Command Injection (CVE-2023-6895)
|
|
High
|
20 Jun 2024 |
1 Jul 2026 |
CPAI-2024-0403
|
|
CVE-2024-4947
|
Google Chrome Type Confusion (CVE-2024-4947)
|
|
Critical
|
26 Mar 2024 |
30 Jun 2026 |
CPAI-2026-8139
|
|
|
Python Functions Remote Code Execution
|
|
High
|
16 Jun 2024 |
30 Jun 2026 |
CPAI-2025-17323
|
|
CVE-2018-17990
CVE-2022-34527
CVE-2023-27216
CVE-2023-44959
CVE-2025-25893
CVE-2025-25894
CVE-2025-25895
|
D-Link DSL-3782 Command Injection (CVE-2018-17990; CVE-2022-34527; CVE-2023-27216; CVE-2023-44959; CVE-2025-25893; CVE-2025-25894; CVE-2025-25895)
|
|
High
|
16 Jun 2024 |
28 Jun 2026 |
CPAI-2025-17243
|
|
CVE-2018-17990
CVE-2022-34527
CVE-2023-27216
CVE-2023-44959
CVE-2025-25893
CVE-2025-25894
CVE-2025-25895
|
D-Link DSL-3782 Command Injection (CVE-2018-17990; CVE-2022-34527; CVE-2023-27216; CVE-2023-44959; CVE-2025-25893; CVE-2025-25894; CVE-2025-25895)
|
|
High
|
14 Mar 2024 |
28 Jun 2026 |
CPAI-2018-2710
|
|
CVE-2018-1000600
|
Jenkins GitHub Plugin Server-Side Request Forgery (CVE-2018-1000600)
|
|
Medium
|
11 Feb 2024 |
28 Jun 2026 |
CPAI-2017-1802
|
|
CVE-2017-9506
|
Atlassian OAuth Plugin Server Side Request Forgery (CVE-2017-9506)
|
|
Critical
|
5 Aug 2024 |
15 Jun 2026 |
CPAI-2024-7333
|
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533
|
Embedded Devices Web Servers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533)
|
|
Critical
|
27 May 2024 |
5 Jun 2026 |
CPAI-2024-6974
|
|
CVE-2024-34716
|
PrestaShop Cross-Site Scripting (CVE-2024-34716)
|
|
Critical
|
27 May 2024 |
4 Jun 2026 |
CPAI-2024-6954
|
|
CVE-2024-34716
|
PrestaShop Cross-Site Scripting (CVE-2024-34716)
|
|
Critical
|
5 Aug 2024 |
3 Jun 2026 |
CPAI-2024-6952
|
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533
|
TOTOLINK Multiple Routers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533)
|
|
High
|
16 May 2024 |
28 May 2026 |
CPAI-2024-3859
|
|
CVE-2024-31445
|
Cacti SQL Injection (CVE-2024-31445)
|
|
Critical
|
25 Mar 2024 |
28 May 2026 |
CPAI-2023-1609
|
|
CVE-2023-20048
|
Cisco Firepower Management Center Command Injection (CVE-2023-20048)
|
|
High
|
27 Jun 2024 |
26 May 2026 |
CPAI-2024-0525
|
|
CVE-2024-5274
|
Google Chrome Type Confusion (CVE-2024-5274)
|
|
Critical
|
5 Aug 2024 |
25 May 2026 |
CPAI-2024-6831
|
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533
|
TOTOLINK Multiple Routers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533)
|
|
High
|
29 Sep 2024 |
24 May 2026 |
CPAI-2024-0859
|
|
CVE-2024-7965
|
Google Chrome V8 Heap Corruption (CVE-2024-7965)
|
|
Critical
|
26 Mar 2024 |
19 May 2026 |
CPAI-2026-4980
|
|
|
Python Functions Remote Code Execution
|
|
High
|
29 Aug 2024 |
14 May 2026 |
CPAI-2024-0686
|
|
CVE-2024-6366
|
WordPress User Profile Builder Plugin Arbitrary File Upload (CVE-2024-6366)
|
|
High
|
27 Oct 2024 |
7 May 2026 |
CPAI-2026-4163
|
|
CVE-2024-9264
CVE-2026-27876
|
Grafana SQL Injection (CVE-2024-9264; CVE-2026-27876)
|
|
Critical
|
15 Sep 2024 |
5 May 2026 |
CPAI-2025-12680
|
|
CVE-2024-28986
CVE-2024-28988
CVE-2025-26399
CVE-2025-40553
|
SolarWinds Web Help Desk Insecure Deserialization (CVE-2024-28986; CVE-2024-28988; CVE-2025-26399; CVE-2025-40553)
|
|
High
|
16 May 2024 |
4 May 2026 |
CPAI-2024-6177
|
|
CVE-2024-3721
|
TBK DVR Command Injection (CVE-2024-3721)
|
|
High
|
26 Feb 2024 |
29 Apr 2026 |
CPAI-2024-6143
|
|
CVE-2024-1708
|
ConnectWise ScreenConnect Remote Code Execution (CVE-2024-1708)
|
|
Critical
|
20 Feb 2024 |
23 Apr 2026 |
CPAI-2017-1803
|
|
CVE-2017-7921
|
Hikvision Multiple Products Improper Authentication (CVE-2017-7921)
|
|
Critical
|
2 Apr 2024 |
20 Apr 2026 |
CPAI-2023-3408
|
|
CVE-2022-32039
CVE-2022-32040
CVE-2022-32043
CVE-2023-37710
CVE-2023-37714
CVE-2023-37715
CVE-2023-37716
CVE-2023-37717
CVE-2023-37718
CVE-2023-37719
CVE-2023-37721
CVE-2023-37722
CVE-2023-37723
CVE-2023-51093
|
Tenda Multiple Products Stack Overflow (CVE-2022-32039; CVE-2022-32040; CVE-2022-32043; CVE-2023-37710; CVE-2023-37714; CVE-2023-37715; CVE-2023-37716; CVE-2023-37717; CVE-2023-37718; CVE-2023-37719; CVE-2023-37721; CVE-2023-37722; CVE-2023-37723; CVE-2023-51093)
|
|
Critical
|
4 Dec 2024 |
14 Apr 2026 |
CPAI-2026-2908
|
|
CVE-2024-39226
CVE-2026-26791
CVE-2026-26792
CVE-2026-26793
CVE-2026-26795
|
GL-iNet Multiple Products Command Injection (CVE-2024-39226; CVE-2026-26791; CVE-2026-26792; CVE-2026-26793; CVE-2026-26795)
|
|
Critical
|
24 Dec 2024 |
26 Mar 2026 |
CPAI-2024-5649
|
|
CVE-2024-56145
|
Craft CMS Remote Code Execution (CVE-2024-56145)
|
|
Critical
|
29 Aug 2024 |
26 Mar 2026 |
CPAI-2021-2978
|
|
CVE-2021-33044
|
Dahua Security Multiple Products Authentication Bypass (CVE-2021-33044)
|
|
Critical
|
11 Dec 2024 |
23 Mar 2026 |
CPAI-2024-1150
|
|
CVE-2024-45216
|
Apache Solr Authentication Bypass (CVE-2024-45216)
|
|
High
|
19 Dec 2024 |
22 Mar 2026 |
CPAI-2024-5589
|
|
CVE-2024-53376
|
CyberPanel Command Injection (CVE-2024-53376)
|
|
High
|
29 Feb 2024 |
19 Mar 2026 |
CPAI-2026-1857
|
|
|
TOTOLINK LR1200GB Authentication Bypass
|
|
Critical
|
5 Aug 2024 |
15 Mar 2026 |
CPAI-2024-5517
|
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533
|
TOTOLINK Multiple Routers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533)
|
Feedback