summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorsecurity tracker role <sectracker@soriano.debian.org>2024-04-09 20:12:02 +0000
committersecurity tracker role <sectracker@soriano.debian.org>2024-04-09 20:12:02 +0000
commit088a99ddbb26b4e070300e19841cb94a21f2d1ed (patch)
treeb7b662a3a06c820626baa0c39acb27b1dffede6c /data
parent897ded81d35a5b015e8519e919af30e5f5f4d497 (diff)
automatic update
Diffstat (limited to 'data')
-rw-r--r--data/CVE/list812
1 files changed, 775 insertions, 37 deletions
diff --git a/data/CVE/list b/data/CVE/list
index 6628f91774..a1ed9c4590 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,741 @@
+CVE-2024-3545 (Improper permission handling in the vault offline cache feature in Dev ...)
+ TODO: check
+CVE-2024-3514 (The Responsive Tabs plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2024-3512 (The WP Shortcodes Plugin \u2014 Shortcodes Ultimate plugin for WordPre ...)
+ TODO: check
+CVE-2024-3446 (A double free vulnerability was found in QEMU virtio devices (virtio-g ...)
+ TODO: check
+CVE-2024-3281 (A vulnerability was discovered in the firmware builds after 8.0.2.3267 ...)
+ TODO: check
+CVE-2024-3267 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2024-3266 (The Bold Page Builder plugin for WordPress is vulnerable to Stored Cro ...)
+ TODO: check
+CVE-2024-3244 (The EmbedPress \u2013 Embed PDF, Google Docs, Vimeo, Wistia, Embed You ...)
+ TODO: check
+CVE-2024-3214 (The Relevanssi \u2013 A Better Search plugin for WordPress is vulnerab ...)
+ TODO: check
+CVE-2024-3213 (The Relevanssi \u2013 A Better Search plugin for WordPress is vulnerab ...)
+ TODO: check
+CVE-2024-3208 (The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross- ...)
+ TODO: check
+CVE-2024-3167 (The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Sit ...)
+ TODO: check
+CVE-2024-3136 (The MasterStudy LMS plugin for WordPress is vulnerable to Local File I ...)
+ TODO: check
+CVE-2024-3097 (The WordPress Gallery Plugin \u2013 NextGEN Gallery plugin for WordPre ...)
+ TODO: check
+CVE-2024-3093 (The Font Farsi plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2024-3064 (The Elementor Addons, Widgets and Enhancements \u2013 Stax plugin for ...)
+ TODO: check
+CVE-2024-3053 (The Forminator \u2013 Contact Form, Payment Form & Custom Form Builder ...)
+ TODO: check
+CVE-2024-3046 (In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4 ...)
+ TODO: check
+CVE-2024-31978 (A vulnerability has been identified in SINEC NMS (All versions < V2.0 ...)
+ TODO: check
+CVE-2024-31868 (Improper Encoding or Escaping of Output vulnerability in Apache Zeppel ...)
+ TODO: check
+CVE-2024-31867 (Improper Input Validation vulnerability in Apache Zeppelin. The attac ...)
+ TODO: check
+CVE-2024-31866 (Improper Encoding or Escaping of Output vulnerability in Apache Zeppel ...)
+ TODO: check
+CVE-2024-31865 (Improper Input Validation vulnerability in Apache Zeppelin. The attac ...)
+ TODO: check
+CVE-2024-31864 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
+ TODO: check
+CVE-2024-31863 (Authentication Bypass by Spoofing vulnerability by replacing to exsiti ...)
+ TODO: check
+CVE-2024-31862 (Improper Input Validation vulnerability in Apache Zeppelin when creati ...)
+ TODO: check
+CVE-2024-31860 (Improper Input Validation vulnerability in Apache Zeppelin. By adding ...)
+ TODO: check
+CVE-2024-31544 (A stored cross-site scripting (XSS) vulnerability in Computer Laborato ...)
+ TODO: check
+CVE-2024-31507 (Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL ...)
+ TODO: check
+CVE-2024-31506 (Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL ...)
+ TODO: check
+CVE-2024-31487 (A improper limitation of a pathname to a restricted directory ('path t ...)
+ TODO: check
+CVE-2024-31457 (gin-vue-admin is a backstage management system based on vue and gin, w ...)
+ TODO: check
+CVE-2024-31455 (Minder by Stacklok is an open source software supply chain security pl ...)
+ TODO: check
+CVE-2024-31454 (PsiTransfer is an open source, self-hosted file sharing solution. Prio ...)
+ TODO: check
+CVE-2024-31453 (PsiTransfer is an open source, self-hosted file sharing solution. Prio ...)
+ TODO: check
+CVE-2024-31370 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2024-31369 (Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad ...)
+ TODO: check
+CVE-2024-31368 (Missing Authorization vulnerability in PenciDesign Soledad.This issue ...)
+ TODO: check
+CVE-2024-31367 (Missing Authorization vulnerability in PenciDesign Soledad.This issue ...)
+ TODO: check
+CVE-2024-30706 (An issue was discovered in ROS2 Dashing Diademata versions ROS_VERSION ...)
+ TODO: check
+CVE-2024-30704 (An insecure deserialization vulnerability has been identified in ROS2 ...)
+ TODO: check
+CVE-2024-30703 (An arbitrary file upload vulnerability has been discovered in ROS2 (Ro ...)
+ TODO: check
+CVE-2024-30702 (An issue was discovered in ROS2 Galactic Geochelone in ROS_VERSION 2 a ...)
+ TODO: check
+CVE-2024-30262 (Contao is an open source content management system. Prior to version 4 ...)
+ TODO: check
+CVE-2024-30191 (A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1 ...)
+ TODO: check
+CVE-2024-30190 (A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1 ...)
+ TODO: check
+CVE-2024-30189 (A vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1 ...)
+ TODO: check
+CVE-2024-2974 (The Essential Addons for Elementor \u2013 Best Elementor Templates, Wi ...)
+ TODO: check
+CVE-2024-2957 (The Simple Ajax Chat \u2013 Add a Fast, Secure Chat Box plugin for Wor ...)
+ TODO: check
+CVE-2024-2946 (The ShopLentor \u2013 WooCommerce Builder for Elementor & Gutenberg +1 ...)
+ TODO: check
+CVE-2024-2918 (Improper input validation in PAM JIT elevation feature in Devolutions ...)
+ TODO: check
+CVE-2024-2871 (The Media Library Assistant plugin for WordPress is vulnerable to SQL ...)
+ TODO: check
+CVE-2024-2866 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder Features pl ...)
+ TODO: check
+CVE-2024-2847 (The WordPress File Upload plugin for WordPress is vulnerable to Stored ...)
+ TODO: check
+CVE-2024-2845 (The BetterDocs \u2013 Best Documentation, FAQ & Knowledge Base Plugin ...)
+ TODO: check
+CVE-2024-2804 (The Network Summary plugin for WordPress is vulnerable to SQL Injectio ...)
+ TODO: check
+CVE-2024-2792 (The Elementor Addon Elements plugin for WordPress is vulnerable to Sto ...)
+ TODO: check
+CVE-2024-2789 (The Happy Addons for Elementor plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2024-2788 (The Happy Addons for Elementor plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2024-2787 (The Happy Addons for Elementor plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2024-2786 (The Happy Addons for Elementor plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2024-2783 (The GamiPress \u2013 The #1 gamification plugin to reward points, achi ...)
+ TODO: check
+CVE-2024-2738 (The Permalink Manager Lite and Pro plugins for WordPress are vulnerabl ...)
+ TODO: check
+CVE-2024-2693 (The Link Whisper Free plugin for WordPress is vulnerable to PHP Object ...)
+ TODO: check
+CVE-2024-2654 (The File Manager plugin for WordPress is vulnerable to Directory Trave ...)
+ TODO: check
+CVE-2024-2650 (The Essential Addons for Elementor \u2013 Best Elementor Templates, Wi ...)
+ TODO: check
+CVE-2024-2623 (The Essential Addons for Elementor \u2013 Best Elementor Templates, Wi ...)
+ TODO: check
+CVE-2024-2543 (The Permalink Manager Lite plugin for WordPress is vulnerable to unaut ...)
+ TODO: check
+CVE-2024-2536 (The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2513 (The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Sit ...)
+ TODO: check
+CVE-2024-2507 (The JetWidgets For Elementor plugin for WordPress is vulnerable to Sto ...)
+ TODO: check
+CVE-2024-2504 (The Page Builder: Pagelayer \u2013 Drag and Drop website builder plugi ...)
+ TODO: check
+CVE-2024-2501 (The Hubbub Lite \u2013 Fast, Reliable Social Sharing Buttons plugin fo ...)
+ TODO: check
+CVE-2024-2492 (The PowerPack Addons for Elementor plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2457 (The Modal Window \u2013 create popup modal window plugin for WordPress ...)
+ TODO: check
+CVE-2024-2456 (The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable t ...)
+ TODO: check
+CVE-2024-2436 (The Lightweight Accordion plugin for WordPress is vulnerable to Stored ...)
+ TODO: check
+CVE-2024-2423 (The UsersWP \u2013 Front-end login form, User Registration, User Profi ...)
+ TODO: check
+CVE-2024-2348 (The Gum Elementor Addon plugin for WordPress is vulnerable to Stored C ...)
+ TODO: check
+CVE-2024-2347 (The Astra theme for WordPress is vulnerable to Stored Cross-Site Scrip ...)
+ TODO: check
+CVE-2024-2344 (The Avada theme for WordPress is vulnerable to SQL Injection via the ' ...)
+ TODO: check
+CVE-2024-2343 (The Avada | Website Builder For WordPress & WooCommerce theme for Word ...)
+ TODO: check
+CVE-2024-2342 (The Appointment Booking Calendar \u2014 Simply Schedule Appointments B ...)
+ TODO: check
+CVE-2024-2341 (The Appointment Booking Calendar \u2014 Simply Schedule Appointments B ...)
+ TODO: check
+CVE-2024-2340 (The Avada theme for WordPress is vulnerable to Sensitive Information E ...)
+ TODO: check
+CVE-2024-2336 (The Popup Maker \u2013 Popup for opt-ins, lead gen, & more plugin for ...)
+ TODO: check
+CVE-2024-2335 (The Elements Plus! plugin for WordPress is vulnerable to Stored Cross- ...)
+ TODO: check
+CVE-2024-2334 (The Template Kit \u2013 Import plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2024-2327 (The Global Elementor Buttons plugin for WordPress is vulnerable to Sto ...)
+ TODO: check
+CVE-2024-2325 (The Link Library plugin for WordPress is vulnerable to Reflected Cross ...)
+ TODO: check
+CVE-2024-2311 (The Avada theme for WordPress is vulnerable to Stored Cross-Site Scrip ...)
+ TODO: check
+CVE-2024-2306 (The Revslider plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2024-2305 (The Cards for Beaver Builder plugin for WordPress is vulnerable to Sto ...)
+ TODO: check
+CVE-2024-2302 (The Easy Digital Downloads \u2013 Sell Digital Files & Subscriptions ( ...)
+ TODO: check
+CVE-2024-2289 (The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerab ...)
+ TODO: check
+CVE-2024-2287 (The Knight Lab Timeline plugin for WordPress is vulnerable to Stored C ...)
+ TODO: check
+CVE-2024-2261 (The Event Tickets and Registration plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2226 (The Otter Blocks \u2013 Gutenberg Blocks, Page Builder for Gutenberg E ...)
+ TODO: check
+CVE-2024-2224 (Improper Limitation of a Pathname to a Restricted Directory (\u2018Pat ...)
+ TODO: check
+CVE-2024-2223 (An Incorrect Regular Expression vulnerability in Bitdefender GravityZo ...)
+ TODO: check
+CVE-2024-2222 (The Advanced Classifieds & Directory Pro plugin for WordPress is vulne ...)
+ TODO: check
+CVE-2024-2200 (The Contact Form by BestWebSoft plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-2198 (The Contact Form by BestWebSoft plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-2187 (The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2186 (The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2185 (The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2183 (The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2181 (The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-2165 (The SEOPress \u2013 On-site SEO plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-2138 (The JetWidgets For Elementor plugin for WordPress is vulnerable to Sto ...)
+ TODO: check
+CVE-2024-2125 (The Env\xedaloSimple: Email Marketing y Newsletters plugin for WordPre ...)
+ TODO: check
+CVE-2024-2117 (The Elementor Website Builder \u2013 More than Just a Page Builder plu ...)
+ TODO: check
+CVE-2024-2112 (The Form Maker by 10Web \u2013 Mobile-Friendly Drag & Drop Contact For ...)
+ TODO: check
+CVE-2024-2093 (The VK All in One Expansion Unit plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-2081 (The Best WordPress Gallery Plugin \u2013 FooGallery plugin for WordPre ...)
+ TODO: check
+CVE-2024-2039 (The Stackable \u2013 Page Builder Gutenberg Blocks plugin for WordPres ...)
+ TODO: check
+CVE-2024-2033 (The Video Conferencing with Zoom plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-2027 (The Real Media Library: Media Library Folder & File Manager plugin for ...)
+ TODO: check
+CVE-2024-2026 (The Passster plugin for WordPress is vulnerable to Stored Cross-Site S ...)
+ TODO: check
+CVE-2024-2018 (The WP Activity Log Premium plugin for WordPress is vulnerable to SQL ...)
+ TODO: check
+CVE-2024-29993 (Azure CycleCloud Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29992 (Azure Identity Library for .NET Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-29990 (Microsoft Azure Kubernetes Service Confidential Container Elevation of ...)
+ TODO: check
+CVE-2024-29989 (Azure Monitor Agent Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29988 (SmartScreen Prompt Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-29985 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29984 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29983 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29982 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29905 (DIRAC is an interware, meaning a software framework for distributed co ...)
+ TODO: check
+CVE-2024-29066 (Windows Distributed File System (DFS) Remote Code Execution Vulnerabil ...)
+ TODO: check
+CVE-2024-29064 (Windows Hyper-V Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-29063 (Azure AI Search Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-29062 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-29061 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-29056 (Windows Authentication Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29055 (Microsoft Defender for IoT Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29054 (Microsoft Defender for IoT Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29053 (Microsoft Defender for IoT Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-29052 (Windows Storage Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-29050 (Windows Cryptographic Services Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-29048 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29047 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29046 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29045 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29044 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-29043 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28945 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28944 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28943 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28942 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28941 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28940 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28939 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28938 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28937 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28936 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28935 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28934 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28933 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28932 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28931 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28930 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28929 (Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerabili ...)
+ TODO: check
+CVE-2024-28927 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28926 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28925 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28924 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28923 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28922 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28921 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28920 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28919 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28917 (Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Priv ...)
+ TODO: check
+CVE-2024-28915 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28914 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28913 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28912 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28911 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28910 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28909 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28908 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28907 (Microsoft Brokering File System Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-28906 (Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabi ...)
+ TODO: check
+CVE-2024-28905 (Microsoft Brokering File System Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-28904 (Microsoft Brokering File System Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-28903 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28902 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
+ TODO: check
+CVE-2024-28901 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
+ TODO: check
+CVE-2024-28900 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
+ TODO: check
+CVE-2024-28898 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28897 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28896 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-28235 (Contao is an open source content management system. Starting in versio ...)
+ TODO: check
+CVE-2024-28234 (Contao is an open source content management system. Starting in versio ...)
+ TODO: check
+CVE-2024-28191 (Contao is an open source content management system. Starting in versio ...)
+ TODO: check
+CVE-2024-28190 (Contao is an open source content management system. Starting in versio ...)
+ TODO: check
+CVE-2024-27665 (Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XS ...)
+ TODO: check
+CVE-2024-27247 (Improper privilege management in the installer for Zoom Desktop Client ...)
+ TODO: check
+CVE-2024-27242 (Cross site scripting in Zoom Desktop Client for Linux before version 5 ...)
+ TODO: check
+CVE-2024-26277 (A vulnerability has been identified in Parasolid V35.1 (All versions < ...)
+ TODO: check
+CVE-2024-26276 (A vulnerability has been identified in Parasolid V35.1 (All versions < ...)
+ TODO: check
+CVE-2024-26275 (A vulnerability has been identified in Parasolid V35.1 (All versions < ...)
+ TODO: check
+CVE-2024-26257 (Microsoft Excel Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26256 (libarchive Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26255 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
+ TODO: check
+CVE-2024-26254 (Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26253 (Windows rndismp6.sys Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26252 (Windows rndismp6.sys Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26251 (Microsoft SharePoint Server Spoofing Vulnerability)
+ TODO: check
+CVE-2024-26250 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26248 (Windows Kerberos Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26245 (Windows SMB Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26244 (Microsoft WDAC OLE DB Provider for SQL Server Remote Code Execution Vu ...)
+ TODO: check
+CVE-2024-26243 (Windows USB Print Driver Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26242 (Windows Telephony Server Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26241 (Win32k Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26240 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26239 (Windows Telephony Server Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26237 (Windows Defender Credential Guard Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26236 (Windows Update Stack Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26235 (Windows Update Stack Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26234 (Proxy Driver Spoofing Vulnerability)
+ TODO: check
+CVE-2024-26233 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26232 (Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26231 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26230 (Windows Telephony Server Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26229 (Windows CSC Service Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26228 (Windows Cryptographic Services Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26227 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26226 (Windows Distributed File System (DFS) Information Disclosure Vulnerabi ...)
+ TODO: check
+CVE-2024-26224 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26223 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26222 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26221 (Windows DNS Server Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26220 (Windows Mobile Hotspot Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-26219 (HTTP.sys Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26218 (Windows Kernel Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26217 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
+ TODO: check
+CVE-2024-26216 (Windows File Server Resource Management Service Elevation of Privilege ...)
+ TODO: check
+CVE-2024-26215 (DHCP Server Service Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26214 (Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerabil ...)
+ TODO: check
+CVE-2024-26213 (Microsoft Brokering File System Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-26212 (DHCP Server Service Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26211 (Windows Remote Access Connection Manager Elevation of Privilege Vulner ...)
+ TODO: check
+CVE-2024-26210 (Microsoft WDAC OLE DB Provider for SQL Server Remote Code Execution Vu ...)
+ TODO: check
+CVE-2024-26209 (Microsoft Local Security Authority Subsystem Service Information Discl ...)
+ TODO: check
+CVE-2024-26208 (Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26207 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
+ TODO: check
+CVE-2024-26205 (Windows Routing and Remote Access Service (RRAS) Remote Code Execution ...)
+ TODO: check
+CVE-2024-26202 (DHCP Server Service Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26200 (Windows Routing and Remote Access Service (RRAS) Remote Code Execution ...)
+ TODO: check
+CVE-2024-26195 (DHCP Server Service Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26194 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26193 (Azure Migrate Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-26189 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26183 (Windows Kerberos Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-26180 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26179 (Windows Routing and Remote Access Service (RRAS) Remote Code Execution ...)
+ TODO: check
+CVE-2024-26175 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26172 (Windows DWM Core Library Information Disclosure Vulnerability)
+ TODO: check
+CVE-2024-26171 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26168 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-26158 (Microsoft Install Service Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-25116 (RedisBloom adds a set of probabilistic data structures to Redis. Start ...)
+ TODO: check
+CVE-2024-25115 (RedisBloom adds a set of probabilistic data structures to Redis. Start ...)
+ TODO: check
+CVE-2024-24694 (Improper privilege management in the installer for Zoom Desktop Client ...)
+ TODO: check
+CVE-2024-24576 (Rust is a programming language. The Rust Security Response WG was noti ...)
+ TODO: check
+CVE-2024-24245 (An issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fi ...)
+ TODO: check
+CVE-2024-23671 (A improper limitation of a pathname to a restricted directory ('path t ...)
+ TODO: check
+CVE-2024-23662 (An exposure of sensitive information to an unauthorized actor in Forti ...)
+ TODO: check
+CVE-2024-22423 (yt-dlp is a youtube-dl fork with additional features and fixes. The pa ...)
+ TODO: check
+CVE-2024-21756 (A improper neutralization of special elements used in an os command (' ...)
+ TODO: check
+CVE-2024-21755 (A improper neutralization of special elements used in an os command (' ...)
+ TODO: check
+CVE-2024-21447 (Windows Authentication Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-21424 (Azure Compute Gallery Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-21409 (.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerab ...)
+ TODO: check
+CVE-2024-21324 (Microsoft Defender for IoT Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-21323 (Microsoft Defender for IoT Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-21322 (Microsoft Defender for IoT Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-20693 (Windows Kernel Elevation of Privilege Vulnerability)
+ TODO: check
+CVE-2024-20689 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-20688 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-20685 (Azure Private 5G Core Denial of Service Vulnerability)
+ TODO: check
+CVE-2024-20678 (Remote Procedure Call Runtime Remote Code Execution Vulnerability)
+ TODO: check
+CVE-2024-20670 (Outlook for Windows Spoofing Vulnerability)
+ TODO: check
+CVE-2024-20669 (Secure Boot Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-20665 (BitLocker Security Feature Bypass Vulnerability)
+ TODO: check
+CVE-2024-1999 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder Features pl ...)
+ TODO: check
+CVE-2024-1991 (The RegistrationMagic \u2013 Custom Registration Forms, User Registrat ...)
+ TODO: check
+CVE-2024-1990 (The RegistrationMagic \u2013 Custom Registration Forms, User Registrat ...)
+ TODO: check
+CVE-2024-1984 (The Graphene theme for WordPress is vulnerable to unauthorized access ...)
+ TODO: check
+CVE-2024-1974 (The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress ...)
+ TODO: check
+CVE-2024-1960 (The ShopLentor \u2013 WooCommerce Builder for Elementor & Gutenberg +1 ...)
+ TODO: check
+CVE-2024-1948 (The Getwid \u2013 Gutenberg Blocks plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-1934 (The WP Compress \u2013 Image Optimizer plugin for WordPress is vulnera ...)
+ TODO: check
+CVE-2024-1904 (The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized ...)
+ TODO: check
+CVE-2024-1893 (The Easy Property Listings plugin for WordPress is vulnerable to time- ...)
+ TODO: check
+CVE-2024-1852 (The WP-Members Membership Plugin plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-1850 (The AI Post Generator | AutoWriter plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-1813 (The Simple Job Board plugin for WordPress is vulnerable to PHP Object ...)
+ TODO: check
+CVE-2024-1812 (The Everest Forms plugin for WordPress is vulnerable to Server-Side Re ...)
+ TODO: check
+CVE-2024-1794 (The Forminator plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2024-1792 (The CMB2 plugin for WordPress is vulnerable to PHP Object Injection in ...)
+ TODO: check
+CVE-2024-1790 (The WordPress Infinite Scroll \u2013 Ajax Load More plugin for WordPre ...)
+ TODO: check
+CVE-2024-1774 (The Customily Product Personalizer plugin for WordPress is vulnerable ...)
+ TODO: check
+CVE-2024-1641 (The Accordion plugin for WordPress is vulnerable to unauthorized acces ...)
+ TODO: check
+CVE-2024-1637 (The 360 Javascript Viewer plugin for WordPress is vulnerable to unauth ...)
+ TODO: check
+CVE-2024-1587 (The Newsmatic theme for WordPress is vulnerable to Sensitive Informati ...)
+ TODO: check
+CVE-2024-1571 (The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross ...)
+ TODO: check
+CVE-2024-1498 (The Happy Addons for Elementor plugin for WordPress is vulnerable to S ...)
+ TODO: check
+CVE-2024-1466 (The Elementor Addons by Livemesh plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-1465 (The Elementor Addons by Livemesh plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-1464 (The Elementor Addons by Livemesh plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-1463 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vul ...)
+ TODO: check
+CVE-2024-1461 (The Elementor Addons by Livemesh plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-1458 (The Elementor Addons by Livemesh plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2024-1424 (The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for ...)
+ TODO: check
+CVE-2024-1412 (The Memberpress plugin for WordPress is vulnerable to Reflected Cross- ...)
+ TODO: check
+CVE-2024-1387 (The Happy Addons for Elementor plugin for WordPress is vulnerable to u ...)
+ TODO: check
+CVE-2024-1352 (The Classified Listing \u2013 Classified ads & Business Directory Plug ...)
+ TODO: check
+CVE-2024-1315 (The Classified Listing \u2013 Classified ads & Business Directory Plug ...)
+ TODO: check
+CVE-2024-1308 (The WooCommerce Cloak Affiliate Links plugin for WordPress is vulnerab ...)
+ TODO: check
+CVE-2024-1289 (The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vul ...)
+ TODO: check
+CVE-2024-0952 (The WP ERP | Complete HR solution with recruitment & job listings | Wo ...)
+ TODO: check
+CVE-2024-0899 (The s2Member \u2013 Best Membership Plugin for All Kinds of Membership ...)
+ TODO: check
+CVE-2024-0873 (The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site ...)
+ TODO: check
+CVE-2024-0872 (The Watu Quiz plugin for WordPress is vulnerable to Sensitive Informat ...)
+ TODO: check
+CVE-2024-0826 (The Qi Addons For Elementor plugin for WordPress is vulnerable to Stor ...)
+ TODO: check
+CVE-2024-0662 (The FancyBox for WordPress plugin for WordPress is vulnerable to Store ...)
+ TODO: check
+CVE-2024-0626 (The WooCommerce Clover Payment Gateway plugin for WordPress is vulnera ...)
+ TODO: check
+CVE-2024-0598 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder Features pl ...)
+ TODO: check
+CVE-2024-0588 (The Paid Memberships Pro \u2013 Content Restriction, User Registration ...)
+ TODO: check
+CVE-2024-0376 (The Premium Addons for Elementor plugin for WordPress is vulnerable to ...)
+ TODO: check
+CVE-2023-7046 (The WP Encryption \u2013 One Click Free SSL Certificate & SSL / HTTPS ...)
+ TODO: check
+CVE-2023-6999 (The Pods \u2013 Custom Content Types and Fields plugin for WordPress i ...)
+ TODO: check
+CVE-2023-6993 (The Custom post types, Custom Fields & more plugin for WordPress is vu ...)
+ TODO: check
+CVE-2023-6967 (The Pods \u2013 Custom Content Types and Fields plugin for WordPress i ...)
+ TODO: check
+CVE-2023-6965 (The Pods \u2013 Custom Content Types and Fields plugin for WordPress i ...)
+ TODO: check
+CVE-2023-6964 (The Gutenberg Blocks by Kadence Blocks \u2013 Page Builder Features pl ...)
+ TODO: check
+CVE-2023-6799 (The WP Reset \u2013 Most Advanced WordPress Reset Tool plugin for Word ...)
+ TODO: check
+CVE-2023-6777 (The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulne ...)
+ TODO: check
+CVE-2023-6695 (The Beaver Themer plugin for WordPress is vulnerable to Sensitive Info ...)
+ TODO: check
+CVE-2023-6694 (The Beaver Themer plugin for WordPress is vulnerable to Stored Cross-S ...)
+ TODO: check
+CVE-2023-6486 (The Spectra \u2013 WordPress Gutenberg Blocks plugin for WordPress is ...)
+ TODO: check
+CVE-2023-6320 (A command injection vulnerability exists in the com.webos.service.conn ...)
+ TODO: check
+CVE-2023-6319 (A command injection vulnerability exists in the getAudioMetadatamethod ...)
+ TODO: check
+CVE-2023-6318 (A command injection vulnerability exists in the processAnalyticsReport ...)
+ TODO: check
+CVE-2023-6317 (A prompt bypass exists in the secondscreen.gateway service running on ...)
+ TODO: check
+CVE-2023-50821 (A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All version ...)
+ TODO: check
+CVE-2023-49913 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49912 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49911 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49910 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49909 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49908 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49907 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49906 (A stack-based buffer overflow vulnerability exists in the web interfac ...)
+ TODO: check
+CVE-2023-49134 (A command execution vulnerability exists in the tddpd enable_test_mode ...)
+ TODO: check
+CVE-2023-49133 (A command execution vulnerability exists in the tddpd enable_test_mode ...)
+ TODO: check
+CVE-2023-49074 (A denial of service vulnerability exists in the TDDP functionality of ...)
+ TODO: check
+CVE-2023-48784 (Ause of externally-controlled format string vulnerability [CWE-134] in ...)
+ TODO: check
+CVE-2023-48724 (A memory corruption vulnerability exists in the web interface function ...)
+ TODO: check
+CVE-2023-47542 (A improper neutralization of special elements used in a template engin ...)
+ TODO: check
+CVE-2023-47541 (An improper limitation of a pathname to a restricted directory ('path ...)
+ TODO: check
+CVE-2023-47540 (An improper neutralization of special elements used in an os command ( ...)
+ TODO: check
+CVE-2023-45590 (An improper control of generation of code ('code injection') in Fortin ...)
+ TODO: check
+CVE-2023-41677 (A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7 ...)
+ TODO: check
+CVE-2022-4965 (The Invitation Code Content Restriction Plugin from CreativeMinds plug ...)
+ TODO: check
CVE-2024-2201 [Native Branch History Injection]
- linux <unfixed>
- xen <unfixed>
@@ -601,7 +1339,7 @@ CVE-2024-3348 (A vulnerability classified as critical has been found in SourceCo
NOT-FOR-US: SourceCodester Aplaya Beach Resort Online Reservation System
CVE-2024-3347 (A vulnerability was found in SourceCodester Airline Ticket Reservation ...)
NOT-FOR-US: SourceCodester Airline Ticket Reservation System
-CVE-2024-3346 (A vulnerability was found in Byzro Smart S80 up to 20240328. It has be ...)
+CVE-2024-3346 (A vulnerability was found in Byzoro Smart S80 up to 20240328. It has b ...)
NOT-FOR-US: Byzro Smart S80
CVE-2024-31852 (LLVM before 18.1.3 generates code in which the LR register can be over ...)
- llvm-toolchain-14 <unfixed>
@@ -11878,7 +12616,7 @@ CVE-2024-1920 (A vulnerability, which was classified as critical, has been found
NOT-FOR-US: osuuu LightPicture
CVE-2024-1919 (A vulnerability classified as problematic was found in SourceCodester ...)
NOT-FOR-US: SourceCodester Online Job Portal
-CVE-2024-1918 (A vulnerability has been found in Beijing Baichuo Smart S42 Management ...)
+CVE-2024-1918 (A vulnerability has been found in Byzoro Smart S42 Management Platform ...)
NOT-FOR-US: Beijing Baichuo Smart S42 Management Platform
CVE-2024-1912 (The Categorify plugin for WordPress is vulnerable to Cross-Site Reques ...)
NOT-FOR-US: WordPress plugin
@@ -16369,7 +17107,7 @@ CVE-2024-1256 (A vulnerability was found in Jspxcms 10.2.0 and classified as pro
NOT-FOR-US: Jspxcms
CVE-2024-1255 (A vulnerability has been found in sepidz SepidzDigitalMenu up to 7.1.0 ...)
NOT-FOR-US: SepidzDigitalMenu
-CVE-2024-1254 (A vulnerability, which was classified as critical, was found in Beijin ...)
+CVE-2024-1254 (A vulnerability, which was classified as critical, was found in Byzoro ...)
NOT-FOR-US: Beijing Baichuo Smart S20 Management Platform
CVE-2024-1253 (A vulnerability, which was classified as critical, has been found in B ...)
NOT-FOR-US: Beijing Baichuo Smart S40 Management Platform
@@ -18445,7 +19183,7 @@ CVE-2024-0942 (A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B2021
NOT-FOR-US: Totolink
CVE-2024-0941 (A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as cr ...)
NOT-FOR-US: Novel-Plus
-CVE-2024-0939 (A vulnerability has been found in Beijing Baichuo Smart S210 Managemen ...)
+CVE-2024-0939 (A vulnerability has been found in Byzoro Smart S210 Management Platfor ...)
NOT-FOR-US: Beijing Baichuo Smart S210 Management Platform
CVE-2024-0938 (A vulnerability, which was classified as critical, was found in Tongda ...)
NOT-FOR-US: Tongda OA
@@ -19735,13 +20473,13 @@ CVE-2024-0718 (A vulnerability, which was classified as problematic, has been fo
NOT-FOR-US: liuwy-dlsdys zhglxt
CVE-2024-0717 (A vulnerability classified as critical was found in D-Link DAP-1360, D ...)
NOT-FOR-US: D-Link
-CVE-2024-0716 (A vulnerability classified as problematic has been found in Beijing Ba ...)
+CVE-2024-0716 (A vulnerability classified as problematic has been found in Byzoro Sma ...)
NOT-FOR-US: Beijing Baichuo Smart S150 Management Platform
CVE-2024-0714 (A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0. It ...)
NOT-FOR-US: MiczFlor RPi-Jukebox-RFID
CVE-2024-0713 (A vulnerability was found in Monitorr 1.7.6m. It has been declared as ...)
NOT-FOR-US: Monitorr
-CVE-2024-0712 (A vulnerability was found in Beijing Baichuo Smart S150 Management Pla ...)
+CVE-2024-0712 (A vulnerability was found in Byzoro Smart S150 Management Platform V31 ...)
NOT-FOR-US: Beijing Baichuo Smart S150 Management Platform
CVE-2024-0705 (The Stripe Payment Plugin for WooCommerce plugin for WordPress is vuln ...)
NOT-FOR-US: WordPress plugin
@@ -22811,7 +23549,7 @@ CVE-2024-0302 (A vulnerability, which was classified as critical, has been found
NOT-FOR-US: fhs-opensource
CVE-2024-0301 (A vulnerability classified as critical was found in fhs-opensource ipa ...)
NOT-FOR-US: fhs-opensource
-CVE-2024-0300 (A vulnerability was found in Beijing Baichuo Smart S150 Management Pla ...)
+CVE-2024-0300 (A vulnerability was found in Byzoro Smart S150 Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S150 Management Platform
CVE-2024-0299 (A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It ...)
NOT-FOR-US: Totolink
@@ -25024,7 +25762,7 @@ CVE-2023-7041 (A vulnerability, which was classified as critical, has been found
NOT-FOR-US: codelyfe Stupid Simple CMS
CVE-2023-7040 (A vulnerability classified as problematic was found in codelyfe Stupid ...)
NOT-FOR-US: codelyfe Stupid Simple CMS
-CVE-2023-7039 (A vulnerability classified as critical has been found in Beijing Baich ...)
+CVE-2023-7039 (A vulnerability classified as critical has been found in Byzoro S210 u ...)
NOT-FOR-US: Beijing Baichuo S210
CVE-2023-7038 (A vulnerability was found in automad up to 1.10.9. It has been rated a ...)
NOT-FOR-US: automad
@@ -28186,9 +28924,9 @@ CVE-2023-6579 (A vulnerability, which was classified as critical, has been found
NOT-FOR-US: osCommerce
CVE-2023-6578 (A vulnerability classified as critical has been found in Software AG W ...)
NOT-FOR-US: Software AG WebMethods
-CVE-2023-6577 (A vulnerability was found in Beijing Baichuo PatrolFlow 2530Pro up to ...)
+CVE-2023-6577 (A vulnerability was found in Byzoro PatrolFlow 2530Pro up to 20231126. ...)
NOT-FOR-US: Beijing Baichuo PatrolFlow 2530Pro
-CVE-2023-6576 (A vulnerability was found in Beijing Baichuo S210 up to 20231123. It h ...)
+CVE-2023-6576 (A vulnerability was found in Byzoro S210 up to 20231123. It has been d ...)
NOT-FOR-US: Beijing Baichuo S210
CVE-2023-6061 (Multiple components of Iconics SCADA Suite are prone to a Phantom DLL ...)
NOT-FOR-US: Iconics SCADA Suite
@@ -28231,9 +28969,9 @@ CVE-2023-45866 (Bluetooth HID Hosts in BlueZ may permit an unauthenticated Perip
NOTE: configuration options but defaulted to false.
CVE-2023-6588 (Offline mode is always enabled, even if permission disallows it, in D ...)
NOT-FOR-US: Devolutions Server
-CVE-2023-6575 (A vulnerability was found in Beijing Baichuo S210 up to 20231121. It h ...)
+CVE-2023-6575 (A vulnerability was found in Byzoro S210 up to 20231121. It has been c ...)
NOT-FOR-US: Beijing Baichuo S210
-CVE-2023-6574 (A vulnerability was found in Beijing Baichuo Smart S20 up to 20231120 ...)
+CVE-2023-6574 (A vulnerability was found in Byzoro Smart S20 up to 20231120 and class ...)
NOT-FOR-US: Beijing Baichuo Smart S20
CVE-2023-6333 (The affected ControlByWeb Relay products are vulnerable to a stored cr ...)
NOT-FOR-US: ControlByWeb Relay
@@ -30507,7 +31245,7 @@ CVE-2023-6276 (A vulnerability classified as critical has been found in Tongda O
NOT-FOR-US: Tongda OA
CVE-2023-6275 (A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1. ...)
NOT-FOR-US: TOTVS Fluig Platform
-CVE-2023-6274 (A vulnerability was found in Beijing Baichuo Smart S80 up to 20231108. ...)
+CVE-2023-6274 (A vulnerability was found in Byzoro Smart S80 up to 20231108. It has b ...)
NOT-FOR-US: Beijing Baichuo Smart S80
CVE-2023-6251 (Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, < ...)
- check-mk <removed>
@@ -32720,7 +33458,7 @@ CVE-2023-6084 (A vulnerability was found in Tongda OA 2017 up to 11.9 and classi
NOT-FOR-US: Tongda OA
CVE-2023-47037 (We failed to applyCVE-2023-40611 in 2.7.1 and this vulnerability was m ...)
- airflow <itp> (bug #819700)
-CVE-2023-5959 (A vulnerability, which was classified as problematic, was found in Bei ...)
+CVE-2023-5959 (A vulnerability, which was classified as problematic, was found in Byz ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform V31R02B10-01
CVE-2023-47390 (Headscale through 0.22.3 writes bearer tokens to info-level logs.)
NOT-FOR-US: Headscale
@@ -36189,9 +36927,9 @@ CVE-2023-5349 (A memory leak flaw was found in ruby-magick, an interface between
[bullseye] - ruby-rmagick <no-dsa> (Minor issue)
NOTE: https://github.com/rmagick/rmagick/pull/1406
NOTE: https://github.com/rmagick/rmagick/commit/fec7a7e639ae565386f7615155dbcf49b957b64a (RMagick_5-3-0)
-CVE-2023-5684 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-5684 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
-CVE-2023-5683 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-5683 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-5682 (A vulnerability has been found in Tongda OA 2017 and classified as cri ...)
NOT-FOR-US: Tongda OA
@@ -38161,19 +38899,19 @@ CVE-2023-5496 (A vulnerability was found in Translator PoqDev Add-On 1.0.11 on F
NOT-FOR-US: Translator PoqDev
CVE-2023-5495 (A vulnerability was found in QDocs Smart School 6.4.1. It has been cla ...)
NOT-FOR-US: QDocs Smart School
-CVE-2023-5494 (A vulnerability was found in Beijing Baichuo Smart S45F Multi-Service ...)
+CVE-2023-5494 (A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Ga ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5493 (A vulnerability has been found in Beijing Baichuo Smart S45F Multi-Ser ...)
+CVE-2023-5493 (A vulnerability has been found in Byzoro Smart S45F Multi-Service Secu ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5492 (A vulnerability, which was classified as critical, was found in Beijin ...)
+CVE-2023-5492 (A vulnerability, which was classified as critical, was found in Byzoro ...)
NOT-FOR-US: Beijing Baichuo Smart
CVE-2023-5491 (A vulnerability, which was classified as critical, has been found in B ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5490 (A vulnerability classified as critical was found in Beijing Baichuo Sm ...)
+CVE-2023-5490 (A vulnerability classified as critical was found in Byzoro Smart S45F ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5489 (A vulnerability classified as critical has been found in Beijing Baich ...)
+CVE-2023-5489 (A vulnerability classified as critical has been found in Byzoro Smart ...)
NOT-FOR-US: Beijing Baichuo Smart
-CVE-2023-5488 (A vulnerability was found in Beijing Baichuo Smart S45F Multi-Service ...)
+CVE-2023-5488 (A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Ga ...)
NOT-FOR-US: Beijing Baichuo Smart
CVE-2023-5450 (An insufficient verification of data vulnerability exists in BIG-IP Ed ...)
NOT-FOR-US: F5
@@ -43118,7 +43856,7 @@ CVE-2023-4877 (Exposure of Sensitive Information to an Unauthorized Actor in Git
NOT-FOR-US: hamza417/inure
CVE-2023-4876 (Exposure of Sensitive Information to an Unauthorized Actor in GitHub r ...)
NOT-FOR-US: hamza417/inure
-CVE-2023-4873 (A vulnerability, which was classified as critical, was found in Beijin ...)
+CVE-2023-4873 (A vulnerability, which was classified as critical, was found in Byzoro ...)
NOT-FOR-US: eijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform
CVE-2023-4872 (A vulnerability, which was classified as critical, has been found in S ...)
NOT-FOR-US: SourceCodester Contact Manager App
@@ -44008,7 +44746,7 @@ CVE-2023-4747 (A vulnerability classified as critical was found in DedeCMS 5.7.1
NOT-FOR-US: DedeCMS
CVE-2023-4746 (A vulnerability classified as critical has been found in TOTOLINK N200 ...)
NOT-FOR-US: TOTOLINK
-CVE-2023-4745 (A vulnerability was found in Beijing Baichuo Smart S45F Multi-Service ...)
+CVE-2023-4745 (A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Ga ...)
NOT-FOR-US: Beijing Baichuo Smart S45F Multi-Service ecure Gateway Intelligent Management Platform
CVE-2023-4744 (A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has be ...)
NOT-FOR-US: Tenda
@@ -45313,11 +46051,11 @@ CVE-2023-4548 (A vulnerability classified as critical has been found in SPA-Cart
NOT-FOR-US: SPA-Cart eCommerce CMS
CVE-2023-4547 (A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has be ...)
NOT-FOR-US: SPA-Cart eCommerce CMS
-CVE-2023-4546 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-4546 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Plattform
CVE-2023-4545 (A vulnerability was found in IBOS OA 4.5.5. It has been classified as ...)
NOT-FOR-US: IBOS OA
-CVE-2023-4544 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-4544 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-4543 (A vulnerability was found in IBOS OA 4.5.5. It has been declared as cr ...)
NOT-FOR-US: IBOS OA
@@ -46209,7 +46947,7 @@ CVE-2023-4422 (Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-
NOT-FOR-US: Cockpit Content Platform (different from src:cockpit)
CVE-2023-4415 (A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has b ...)
NOT-FOR-US: Ruijie
-CVE-2023-4414 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-4414 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-4413
REJECTED
@@ -48453,9 +49191,9 @@ CVE-2023-4125 (Weak Password Requirements in GitHub repository answerdev/answer
NOT-FOR-US: answerdev/answer
CVE-2023-4124 (Missing Authorization in GitHub repository answerdev/answer prior to v ...)
NOT-FOR-US: answerdev/answer
-CVE-2023-4121 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-4121 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
-CVE-2023-4120 (A vulnerability was found in Beijing Baichuo Smart S85F Management Pla ...)
+CVE-2023-4120 (A vulnerability was found in Byzoro Smart S85F Management Platform up ...)
NOT-FOR-US: Beijing Baichuo Smart S85F Management Platform
CVE-2023-4119 (A vulnerability has been found in Academy LMS 6.0 and classified as pr ...)
NOT-FOR-US: Academy LMS
@@ -71735,10 +72473,10 @@ CVE-2023-1085
RESERVED
CVE-2023-1084 (An issue has been discovered in GitLab CE/EE affecting all versions be ...)
- gitlab 15.10.8+ds1-2
-CVE-2023-1083
- RESERVED
-CVE-2023-1082
- RESERVED
+CVE-2023-1083 (An unauthenticated remote attacker who is aware of aMQTT topic name c ...)
+ TODO: check
+CVE-2023-1082 (An remote attacker with low privileges can perform a command injection ...)
+ TODO: check
CVE-2023-27296 (Deserialization of Untrusted Data vulnerability in Apache Software Fou ...)
NOT-FOR-US: Apache InLong
CVE-2023-27295 (Cross-site request forgery is facilitated by OpenCATS failure to requi ...)
@@ -88192,8 +88930,8 @@ CVE-2022-47896 (In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were v
- intellij-idea <itp> (bug #747616)
CVE-2022-47895 (In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" act ...)
- intellij-idea <itp> (bug #747616)
-CVE-2022-47894
- RESERVED
+CVE-2022-47894 (Improper Input Validation vulnerability in Apache Zeppelin SAP.This is ...)
+ TODO: check
CVE-2022-47893 (There is a remote code execution vulnerability that affects all versio ...)
NOT-FOR-US: NetMan 204
CVE-2022-47892 (All versions of NetMan 204 could allow an unauthenticated remote attac ...)
@@ -218625,8 +219363,8 @@ CVE-2021-28657 (A carefully crafted or corrupt file may trigger an infinite loop
[bullseye] - tika <no-dsa> (Minor issue)
[buster] - tika <no-dsa> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2021/03/30/3
-CVE-2021-28656
- RESERVED
+CVE-2021-28656 (Cross-Site Request Forgery (CSRF) vulnerability in Credential page of ...)
+ TODO: check
CVE-2021-28655 (The improper Input Validation vulnerability in "\u201dMove folder to T ...)
NOT-FOR-US: Apache Zeppelin
CVE-2021-28654

© 2014-2024 Faster IT GmbH | imprint | privacy policy