National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,536 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 39,245 matching advisories
Page 120 of 1,636
thedevoice/lazy_blocks CWE-79 Remote (AV:N)

The Custom Block Builder WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used ...

📅 2025-02-26 Inspect Dossier →
CVE-2024-12737 MEDIUM 6.1
wp-base/wp_base_booking_of_appointments\,_services_and_events CWE-79 Remote (AV:N)

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site...

📅 2025-02-26 Inspect Dossier →
CVE-2024-12434 MEDIUM 5.3
CWE-200 Remote (AV:N)

The SureMembers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.10.6 via the REST API. This makes it possible for unauthenticated attackers...

📅 2025-02-26 Inspect Dossier →
CVE-2024-10563 MEDIUM 5.4
prontotools/woo_cart_count_shortcode CWE-79 Remote (AV:N)

The WooCommerce Cart Count Shortcode WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed...

📅 2025-02-26 Inspect Dossier →
simplepress/simplepress CWE-79 Remote (AV:N)

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting....

📅 2025-02-26 Inspect Dossier →
elementengage/simple_certain_time_to_show_content CWE-79 Remote (AV:N)

The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which ...

📅 2025-02-26 Inspect Dossier →
CVE-2024-30150 MEDIUM 5.3
hcltech/dryice_mycloud CWE-269 Remote (AV:N)

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF)...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-1284

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this ...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-1284

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a crash by passing a malformed ELF file to cuobjdump. A successful exploit of this ...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-476

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful explo...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit ...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploi...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploi...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of t...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploi...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit ...

📅 2025-02-25 Inspect Dossier →
nvidia/cuda_toolkit CWE-125

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploi...

📅 2025-02-25 Inspect Dossier →
CVE-2024-27246 MEDIUM 4.3
zoom/meeting_software_development_kit CWE-416 Remote (AV:N)

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access....

📅 2025-02-25 Inspect Dossier →
CVE-2024-27245 MEDIUM 4.3
zoom/meeting_software_development_kit CWE-122 Remote (AV:N)

Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access....

📅 2025-02-25 Inspect Dossier →
CVE-2024-27239 MEDIUM 4.3
zoom/meeting_software_development_kit CWE-416 Remote (AV:N)

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access....

📅 2025-02-25 Inspect Dossier →
CWE-447

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged attacker with physical access to the device could load untrusted code. A success...

📅 2025-02-25 Inspect Dossier →
CVE-2024-45426 MEDIUM 4.9
zoom/meeting_software_development_kit CWE-708 Remote (AV:N)

Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access....

📅 2025-02-25 Inspect Dossier →
CVE-2024-45425 MEDIUM 4.9
zoom/meeting_software_development_kit CWE-286 Remote (AV:N)

Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access....

📅 2025-02-25 Inspect Dossier →
CVE-2024-45424 MEDIUM 5.3
zoom/meeting_software_development_kit CWE-840 Remote (AV:N)

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access....

📅 2025-02-25 Inspect Dossier →
Showing Page 120 of 1,636 • 39,245 matching CVEs (out of 396,536 NIST advisories)