High
|
11 Sep 2024 |
11 Sep 2024 |
CPAI-2010-0813
|
|
CVE-2010-2551
|
Microsoft Windows Denial of Service (CVE-2010-2551)
|
High
|
11 Sep 2024 |
11 Sep 2024 |
CPAI-2023-1890
|
|
CVE-2023-33919
|
Siemens Multiple Products Command Injection (CVE-2023-33919)
|
Medium
|
11 Sep 2024 |
11 Sep 2024 |
CPAI-2024-0768
|
|
CVE-2024-4044
|
National Instruments FlexLogger Insecure Deserialization (CVE-2024-4044)
|
Critical
|
11 Sep 2024 |
11 Sep 2024 |
CPAI-2023-1873
|
|
CVE-2023-5222
|
Viessmann Vitogate 300 Hardcoded Credentials (CVE-2023-5222)
|
Critical
|
11 Sep 2024 |
11 Sep 2024 |
CPAI-2024-0702
|
|
CVE-2024-4883
|
WhatsUp Gold Directory Traversal (CVE-2024-4883)
|
Medium
|
7 Jul 2024 |
11 Sep 2024 |
CPAI-2019-3209
|
|
CVE-2019-14470
|
WordPress UserPro Plugin Cross-Site Scripting (CVE-2019-14470)
|
High
|
11 Sep 2024 |
11 Sep 2024 |
CPAI-2023-1146
|
|
CVE-2023-43622
|
Apache HTTP Server Remote Code Execution (CVE-2023-43622)
|
High
|
10 Sep 2024 |
10 Sep 2024 |
CPAI-2024-0790
|
Adobe APSB24-70
|
CVE-2024-41869
|
Adobe Acrobat and Reader Use After Free (APSB24-70: CVE-2024-41869)
|
High
|
10 Sep 2024 |
10 Sep 2024 |
CPAI-2024-0789
|
Adobe APSB24-70
|
CVE-2024-39420
|
Adobe Acrobat and Reader Time-of-check Time-of-use (APSB24-70: CVE-2024-39420)
|
High
|
10 Sep 2024 |
10 Sep 2024 |
CPAI-2024-0765
|
Microsoft CVE-2024-38244
|
CVE-2024-38244
|
Microsoft Kernel Streaming Service Driver Elevation of Privilege (CVE-2024-38244)
|
High
|
10 Sep 2024 |
10 Sep 2024 |
CPAI-2024-0762
|
Microsoft CVE-2024-38243
|
CVE-2024-38243
|
Microsoft Kernel Streaming Service Driver Elevation of Privilege (CVE-2024-38243)
|
High
|
10 Sep 2024 |
10 Sep 2024 |
CPAI-2024-0760
|
Microsoft CVE-2024-38237
|
CVE-2024-38237
|
Microsoft Kernel Streaming WOW Thunk Service Driver Elevation of Privilege (CVE-2024-38237)
|
High
|
10 Sep 2024 |
10 Sep 2024 |
CPAI-2024-0759
|
Microsoft CVE-2024-38241
|
CVE-2024-38241
|
Microsoft Kernel Streaming Service Driver Elevation of Privilege (CVE-2024-38241)
|
High
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2024-0788
|
|
CVE-2024-45195
|
Apache OFBiz Remote Code Execution (CVE-2024-45195)
|
High
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2024-0777
|
|
CVE-2024-7331
|
Totolink A3300R Buffer Overflow (CVE-2024-7331)
|
High
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2023-1889
|
|
CVE-2023-3450
|
Ruijie RG-BCR860 Command Injection (CVE-2023-3450)
|
High
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2024-0775
|
|
|
Dahua Smart Park Arbitrary File Upload
|
Medium
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2023-1884
|
|
CVE-2023-0084
|
WordPress Metform Elementor Plugin Cross-Site Scripting (CVE-2023-0084)
|
Critical
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2024-0722
|
|
CVE-2024-41660
|
OpenBMC slpd-lite Heap Buffer Overflow (CVE-2024-41660)
|
High
|
20 Aug 2024 |
9 Sep 2024 |
CPAI-2018-2785
|
|
CVE-2018-12543
|
Eclipse Mosquitto Denial-of-Service (CVE-2018-12543)
|
High
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2024-0648
|
|
CVE-2024-1167
|
SEW-EURODRIVE MOVITOOLS MotionStudio External Entity Injection (CVE-2024-1167)
|
Medium
|
19 Jun 2024 |
9 Sep 2024 |
CPAI-2023-1589
|
|
CVE-2023-0921 CVE-2024-2874
|
GitLab Denial of Service (CVE-2023-0921; CVE-2024-2874)
|
Medium
|
9 Sep 2024 |
9 Sep 2024 |
CPAI-2019-2908
|
|
CVE-2019-0948
|
Microsoft Windows XML External Entity Injection (CVE-2019-0948)
|
High
|
8 Sep 2024 |
8 Sep 2024 |
CPAI-2024-0783
|
|
CVE-2024-39906
|
Haven Command Injection (CVE-2024-39906)
|
High
|
8 Sep 2024 |
8 Sep 2024 |
CPAI-2023-1893
|
|
CVE-2023-51389 CVE-2024-42362
|
Apache HertzBeat Insecure Deserialization (CVE-2023-51389; CVE-2024-42362)
|
High
|
8 Sep 2024 |
8 Sep 2024 |
CPAI-2024-0776
|
|
CVE-2024-45528
|
CodeAstro Membership Management System Cross-Site Scripting (CVE-2024-45528)
|
Critical
|
8 Sep 2024 |
8 Sep 2024 |
CPAI-2024-0773
|
|
CVE-2024-6633
|
Fortra FileCatalyst Workflow Remote Code Execution (CVE-2024-6633)
|
Critical
|
26 Mar 2024 |
8 Sep 2024 |
CPAI-2024-0075
|
|
CVE-2007-4556 CVE-2013-4316
|
Object-Graph Navigation Language Injection (CVE-2007-4556; CVE-2013-4316)
|
High
|
8 Sep 2024 |
8 Sep 2024 |
CPAI-2022-1446
|
|
CVE-2022-36957 CVE-2022-38108 CVE-2022-47503 CVE-2022-47504
|
SolarWinds Orion Platform Insecure Deserialization (CVE-2022-36957; CVE-2022-38108; CVE-2022-47503; CVE-2022-47504)
|
Medium
|
5 Sep 2024 |
5 Sep 2024 |
CPAI-2023-1887
|
|
CVE-2023-6502
|
GitLab Community Edition (CE) and Enterprise Denial Of Service (Redos) (CVE-2023-6502)
|
Medium
|
5 Sep 2024 |
5 Sep 2024 |
CPAI-2010-0812
|
|
CVE-2010-2742
|
Microsoft Windows Server Denial of Service (CVE-2010-2742)
|
Medium
|
5 Sep 2024 |
5 Sep 2024 |
CPAI-2022-1595
|
|
CVE-2022-1018
|
Rockwell Automation Multiple Products XML External Entity Injection (CVE-2022-1018)
|
High
|
5 Sep 2024 |
5 Sep 2024 |
CPAI-2021-1774
|
|
CVE-2021-40346
|
HAProxy Integer Overflow (CVE-2021-40346)
|
High
|
5 Sep 2024 |
5 Sep 2024 |
CPAI-2020-3836
|
|
CVE-2020-16215
|
Advantech WebAccess/HMI Designer Buffer Overflow (CVE-2020-16215)
|
High
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2023-1888
|
|
CVE-2023-25570
|
Apollo Eureka Authentication Bypass (CVE-2023-25570)
|
High
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2024-0766
|
|
|
Hikvision Multiple Products Arbitrary File Upload
|
Critical
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2023-1882
|
|
CVE-2023-48362
|
Apache Drill XML External Entity (CVE-2023-48362)
|
High
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2023-1880
|
|
CVE-2023-27981
|
Schneider Electric Multiple Products Directory Traversal (CVE-2023-27981)
|
Critical
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2024-0684
|
|
CVE-2024-37079
|
VMWare vCenter Server Integer Underflow (CVE-2024-37079)
|
High
|
25 Jul 2024 |
4 Sep 2024 |
CPAI-2024-0601
|
|
CVE-2024-38112
|
Microsoft Windows Spoofing (CVE-2024-38112)
|
Medium
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2013-3853
|
|
CVE-2013-4826
|
HP Multiple Products Information Disclosure (CVE-2013-4826)
|
Medium
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2016-1254
|
|
CVE-2016-2168
|
Apache Subversion Denial of Service (CVE-2016-2168)
|
Critical
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2022-1567
|
|
CVE-2022-2329
|
Schneider Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2022-2329)
|
Medium
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2022-1565
|
|
CVE-2022-22707
|
Lighttpd Buffer Overflow (CVE-2022-22707)
|
Medium
|
4 Sep 2024 |
4 Sep 2024 |
CPAI-2020-3840
|
|
CVE-2020-26981
|
Siemens Multiple Products Information Disclosure (CVE-2020-26981)
|
High
|
3 Sep 2024 |
3 Sep 2024 |
CPAI-2024-0755
|
|
CVE-2024-37901
|
XWiki.org XWiki Server-Side Template Injection (CVE-2024-37901)
|
Critical
|
3 Sep 2024 |
3 Sep 2024 |
CPAI-2024-0753
|
|
CVE-2024-6386
|
WordPress WPML Plugin Server-Side Template Injection (CVE-2024-6386)
|
Medium
|
3 Sep 2024 |
3 Sep 2024 |
CPAI-2024-0747
|
|
CVE-2024-23119
|
Centreon Project Centreon Web SQL Injection (CVE-2024-23119)
|
Critical
|
3 Sep 2024 |
3 Sep 2024 |
CPAI-2023-1881
|
|
CVE-2023-29412
|
Schneider Electric APC Easy UPS Online Monitoring Remote Code Execution (CVE-2023-29412)
|
High
|
3 Sep 2024 |
3 Sep 2024 |
CPAI-2024-0737
|
|
CVE-2024-32766
|
myQNAPcloud Command Injection (CVE-2024-32766)
|