Tag: CWE-502

Ultimate Membership Pro

CVE-2024-43242

10.0

audit@patchstack.com

CWE-502

2024-08-19

CVE-2024-43242

Progress Telerik Report Server

CVE-2024-6327

9.9

security@progress.com

CWE-502

2024-07-24

CVE-2024-6327

Published: July 24, 2024

CVE-2023-39475

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-39475

CVE-2023-39476

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-39476

CVE-2023-51576

Voltronic Power ViewPower

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-51576

CVE-2024-26289

PMB Services PMB

CWE-502

2024-05-27

CVE-2024-26289

a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Published: May 27, 2024

CVE-2024-5671

Trellix IPS Manager

CWE-502

trellixpsirt@trellix.com

2024-06-14

CVE-2024-5671

Published: June 14, 2024

CVE-2024-40624

TorrentPier

security-advisories@github.com

CWE-502

2024-07-15

CVE-2024-40624

Published: July 15, 2024

CVE-2024-6793

NI VeriStand DataLogging Server

CWE-502

security@ni.com

2024-07-22

CVE-2024-6793

CVE-2024-6794

NI VeriStand Waveform Streaming Server

CWE-502

security@ni.com

2024-07-22

CVE-2024-6794

CVE-2024-43141

Participants Database

audit@patchstack.com

CWE-502

2024-08-13

CVE-2024-43141

Published: August 13, 2024

CVE-2024-43354

myCred

audit@patchstack.com

CWE-502

2024-08-19

CVE-2024-43354

CVE-2024-5932

givewp

security@wordfence.com

CWE-502

2024-08-20

CVE-2024-5932

CVE-2024-8003

Go-Tribe gotribe-admin

CWE-502

cna@vuldb.com

2024-08-20

CVE-2024-8003

CVE-2024-5335

Ultimate Store Kit Elementor Addons

security@wordfence.com

CWE-502

2024-08-21

CVE-2024-5335

Published: August 21, 2024

CVE-2024-8030

Ultimate Store Kit Elementor Addons

security@wordfence.com

CWE-502

2024-08-28

CVE-2024-8030

Published: August 28, 2024

CVE-2024-43931

Published: August 29, 2024

JobSearch

audit@patchstack.com

CWE-502

2024-08-29

CVE-2024-43931

CVE-2024-8255

Delta Electronics DTN Soft

ics-cert@hq.dhs.gov

CWE-502

2024-08-29

CVE-2024-8255

Published: August 29, 2024

CVE-2023-37227

Loftware Spectrum

cve@mitre.org

CWE-502

2024-09-10

CVE-2023-37227

CVE-2024-29847

Ivanti EPM

CWE-502

support@hackerone.com

2024-09-12

CVE-2024-29847

CVE-2024-41874

Published: September 13, 2024

ColdFusion

psirt@adobe.com

CWE-502

2024-09-13

CVE-2024-41874

CVE-2024-8862

Published: September 14, 2024

h2oai h2o-3

CWE-502

cna@vuldb.com

2024-09-14

CVE-2024-8862

CVE-2024-22399

Published: September 16, 2024

Apache Seata

security@apache.org

CWE-502

2024-09-16

CVE-2024-22399

CVE-2024-7576

Progress Telerik UI for WPF

security@progress.com

CWE-502

2024-09-25

CVE-2024-7576

Published: September 25, 2024

CVE-2024-8353

Published: September 28, 2024

givewp

security@wordfence.com

CWE-502

2024-09-28

CVE-2024-8353

CVE-2024-47636

Published: October 10, 2024

JobSearch

audit@patchstack.com

CWE-502

2024-10-10

CVE-2024-47636

CVE-2024-48033

Published: October 11, 2024

Talkback

audit@patchstack.com

CWE-502

2024-10-11

CVE-2024-48033

CVE-2024-44902

Published: September 9, 2024

ThinkPHP

cve@mitre.org

CWE-502

2024-09-09

CVE-2024-44902

CVE-2024-40711

Published: September 7, 2024

UNKNOWN

CWE-502

support@hackerone.com

2024-09-07

CVE-2024-40711

CVE-2024-9634

GiveWP Donation Plugin and Fundraising Platform

security@wordfence.com

CWE-502

2024-10-16

CVE-2024-9634

CVE-2024-48026

Disc Golf Manager

audit@patchstack.com

CWE-502

2024-10-16

CVE-2024-48026

CVE-2024-48028

IP Loc8

audit@patchstack.com

CWE-502

2024-10-16

CVE-2024-48028

CVE-2024-48030

Telecash Ricaricaweb

audit@patchstack.com

CWE-502

2024-10-16

CVE-2024-48030

CVE-2024-49218

Al Imran Akash Recently

audit@patchstack.com

CWE-502

2024-10-16

CVE-2024-49218

CVE-2024-49318

Published: October 17, 2024

My Reading Library

audit@patchstack.com

CWE-502

2024-10-17

CVE-2024-49318

CVE-2024-49626

Shipyaari Shipping Management

audit@patchstack.com

CWE-502

2024-10-20

CVE-2024-49626

CVE-2024-49332

Giveaway Boost

audit@patchstack.com

CWE-502

2024-10-20

CVE-2024-49332

CVE-2024-49624

Smartdevth Advanced Advertising System

audit@patchstack.com

CWE-502

2024-10-20

CVE-2024-49624

CVE-2024-49625

SiteBuilder Dynamic Components

audit@patchstack.com

CWE-502

2024-10-20

CVE-2024-49625

SolarWinds Access Rights Manager

CVE-2024-28074

9.6

CWE-502

psirt@solarwinds.com

2024-07-17

CVE-2024-28074

Published: July 17, 2024

CVE-2024-45758

9.1

H2O.ai H2O

cve@mitre.org

CWE-502

2024-09-06

CVE-2024-45758

Published: September 6, 2024

CVE-2024-28075

9.0

SolarWinds Access Rights Manager

CWE-502

psirt@solarwinds.com

2024-05-14

CVE-2024-28075

CVE-2024-3300

9.0

DELMIA Apriso

CWE-502

3DS.Information-Security@3ds.com

2024-05-30

CVE-2024-3300

Published: May 30, 2024

CVE-2024-43252

9.0

Crew HRM

audit@patchstack.com

CWE-502

2024-08-19

CVE-2024-43252

CVE-2023-39473

zdi-disclosures@trendmicro.com

2024-05-03

CVE-2023-39473

CWE-502

CVE-2023-50218

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-50218

CVE-2023-50219

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-50219

CVE-2023-50221

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-50221

CVE-2023-50222

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-50222

CVE-2023-50223

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-50223

CVE-2024-30044

CWE-502

2024-05-14

secure@microsoft.com

CVE-2024-30044

CVE-2024-37052

CWE-502

2024-06-04

CVE-2024-37052

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37053

MLflow platform

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37053

CVE-2024-37054

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37054

CVE-2024-37055

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37055

CVE-2024-37056

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37056

CVE-2024-37057

MLflow platform

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37057

CVE-2024-37058

MLflow platform

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37058

CVE-2024-37059

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37059

CVE-2024-37060

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37060

CVE-2024-35249

Microsoft Dynamics 365 Business Central

CWE-502

secure@microsoft.com

2024-06-11

CVE-2024-35249

Published: June 11, 2024

CVE-2024-6152

Flipbox Builder plugin for WordPress

security@wordfence.com

CWE-502

2024-07-27

CVE-2024-6152

Published: July 27, 2024

CVE-2024-7486

MultiPurpose theme for WordPress

security@wordfence.com

CWE-502

2024-08-08

CVE-2024-7486

Published: August 8, 2024

CVE-2024-7561

WordPress The Next theme

security@wordfence.com

CWE-502

2024-08-08

CVE-2024-7561

Published: August 8, 2024

CVE-2024-42362

Hertzbeat

security-advisories@github.com

CWE-502

2024-08-20

CVE-2024-42362

CVE-2024-42363

Kubernetes

security-advisories@github.com

CWE-502

2024-08-20

CVE-2024-42363

CVE-2024-2694

Betheme theme for WordPress

security@wordfence.com

CWE-502

2024-08-30

CVE-2024-2694

Published: August 30, 2024

CVE-2024-7435

Attire theme for WordPress

security@wordfence.com

CWE-502

2024-08-31

CVE-2024-7435

Published: August 31, 2024

CVE-2024-37288

Published: September 9, 2024

Kibana

CWE-502

bressers@elastic.co

2024-09-09

CVE-2024-37288

CVE-2024-38018

CWE-502

secure@microsoft.com

NVD-CWE-noinfo

2024-09-10

CVE-2024-38018

CVE-2024-45852

CWE-502

6f8de1f0-f67e-45a6-b68f-98777fdb759c

2024-09-12

CVE-2024-45852

CVE-2024-28991

SolarWinds Access Rights Manager (ARM)

CWE-502

psirt@solarwinds.com

NVD-CWE-noinfo

2024-09-12

CVE-2024-28991

CVE-2024-42323

Apache HertzBeat (incubating)

security@apache.org

CWE-502

2024-09-21

CVE-2024-42323

Published: September 21, 2024

CVE-2024-8922

Product Enquiry for WooCommerce

security@wordfence.com

CWE-502

2024-09-27

CVE-2024-8922

Published: September 27, 2024

CVE-2024-7432

WordPress Unseen Blog theme

security@wordfence.com

CWE-502

2024-10-01

CVE-2024-7432

Published: October 1, 2024

CVE-2024-7433

WordPress Empowerment theme

security@wordfence.com

CWE-502

2024-10-01

CVE-2024-7433

Published: October 1, 2024

CVE-2024-7434

UltraPress theme for WordPress

security@wordfence.com

CWE-502

2024-10-01

CVE-2024-7434

Published: October 1, 2024

CVE-2024-45733

Published: October 14, 2024

windows

CWE-502

2024-10-14

prodsec@splunk.com

CVE-2024-45733

CVE-2024-49226

TAKETIN To WP Membership

audit@patchstack.com

CWE-502

2024-10-16

CVE-2024-49226

CVE-2024-49227

Free Stock Photos Foter

audit@patchstack.com

CWE-502

2024-10-16

CVE-2024-49227

CVE-2024-10079

WP Easy Post Types plugin for WordPress

security@wordfence.com

CWE-502

2024-10-18

CVE-2024-10079

Published: October 18, 2024

CVE-2024-3301

8.5

DELMIA Apriso

CWE-502

3DS.Information-Security@3ds.com

2024-05-30

CVE-2024-3301

Published: May 30, 2024

CVE-2024-35780

8.5

Page Builder: Live Composer

audit@patchstack.com

CWE-502

2024-06-19

CVE-2024-35780

Published: June 19, 2024

CVE-2024-4978

8.4

Justice AV Solutions Viewer Setup

CWE-502

9119a7d8-5eab-497f-8521-727c672e3725

2024-05-23

CVE-2024-4978

Published: May 23, 2024

CVE-2024-39636

8.3

Better Find and Replace

audit@patchstack.com

CWE-502

2024-08-01

CVE-2024-39636

Published: August 1, 2024

CVE-2024-32030

8.1

Kafka UI

security-advisories@github.com

CWE-502

2024-06-19

CVE-2024-32030

Published: June 19, 2024

CVE-2024-29800

8.0

Timber Team & Contributors Timber

audit@patchstack.com

CWE-502

2024-05-14

CVE-2024-29800

Apache Lucene Replicator

CVE-2024-45772

8.0

security@apache.org

CWE-502

2024-09-30

CVE-2024-45772

Published: September 30, 2024

CVE-2024-34072

sagemaker-python-sdk

security-advisories@github.com

2024-05-03

CWE-502

CVE-2024-34072

CVE-2024-4044

NI FlexLogger

CWE-502

2024-05-14

CVE-2024-4044

security@ni.com

CVE-2024-30042

Microsoft Excel

CWE-502

2024-05-14

secure@microsoft.com

CVE-2024-30042

CVE-2024-37062

Ydata ydata-profiling open-source library

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37062

CVE-2024-37064

Ydata ydata-profiling open-source library

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37064

CVE-2024-37065

skops python library

CWE-502

2024-06-04

6f8de1f0-f67e-45a6-b68f-98777fdb759c

CVE-2024-37065

CVE-2024-28964

Dell Common Event Enabler

security_alert@emc.com

CWE-502

2024-06-12

CVE-2024-28964

Published: June 12, 2024

CVE-2022-45147

SIMATIC PCS neo

CWE-502

productcert@siemens.com

2024-07-09

CVE-2022-45147

CVE-2024-6675

NI VeriStand

CWE-502

security@ni.com

2024-07-22

CVE-2024-6675

CVE-2024-45857

Cleanlab project

CWE-502

6f8de1f0-f67e-45a6-b68f-98777fdb759c

2024-09-12

CVE-2024-45857

CVE-2024-8316

Published: September 25, 2024

Telerik UI for WPF

security@progress.com

CWE-502

2024-09-25

CVE-2024-8316

CVE-2024-4200

7.7

Progress Telerik Reporting

security@progress.com

CWE-502

2024-05-15

CVE-2024-4200

Published: May 15, 2024

CVE-2024-3967

7.6

OpenText iManager

security@opentext.com

CWE-502

2024-05-15

CVE-2024-3967

Published: May 15, 2024

CVE-2024-31879

IBM i

psirt@us.ibm.com

CWE-502

2024-05-18

CVE-2024-31879

Published: May 18, 2024

CVE-2024-43466

CWE-502

secure@microsoft.com

NVD-CWE-noinfo

2024-09-10

CVE-2024-43466

CVE-2024-45853

CWE-502

6f8de1f0-f67e-45a6-b68f-98777fdb759c

2024-09-12

CVE-2024-45853

CVE-2024-45854

CWE-502

6f8de1f0-f67e-45a6-b68f-98777fdb759c

2024-09-12

CVE-2024-45854

CVE-2024-45855

CWE-502

6f8de1f0-f67e-45a6-b68f-98777fdb759c

2024-09-12

CVE-2024-45855

Published: October 3, 2024

CVE-2024-47561

7.3

Apache Avro

security@apache.org

CWE-502

2024-10-03

CVE-2024-47561

CVE-2023-50220

zdi-disclosures@trendmicro.com

2024-05-03

CWE-502

CVE-2023-50220

CVE-2024-5016

WhatsUp Gold

security@progress.com

CWE-502

2024-06-25

CVE-2024-5016

Published: June 25, 2024

CVE-2024-38023

CWE-502

secure@microsoft.com

2024-07-09

CVE-2024-38023

CVE-2024-38024

CWE-502

secure@microsoft.com

2024-07-09

CVE-2024-38024

CVE-2024-38094

Microsoft SharePoint

CWE-502

secure@microsoft.com

2024-07-09

CVE-2024-38094

CVE-2024-7560

WordPress News Flash theme

security@wordfence.com

CWE-502

2024-08-08

CVE-2024-7560

Published: August 8, 2024

CVE-2024-7351

Simple Job Board plugin for WordPress

security@wordfence.com

CWE-502

2024-08-24

CVE-2024-7351

Published: August 24, 2024

CVE-2022-2440

WordPress Theme Editor plugin

security@wordfence.com

CWE-502

2024-08-29

CVE-2022-2440

Published: August 29, 2024

CVE-2024-8016

Events Calendar Pro plugin for WordPress

security@wordfence.com

CWE-502

2024-08-30

CVE-2024-8016

Published: August 30, 2024

CVE-2024-43464

CWE-502

secure@microsoft.com

NVD-CWE-noinfo

2024-09-10

CVE-2024-43464

CVE-2022-2446

WP Editor plugin for WordPress

security@wordfence.com

CWE-502

2024-09-13

CVE-2022-2446

Published: September 13, 2024

CVE-2022-2439

Easy Digital Downloads - Simple eCommerce for Selling Digital Files plugin for WordPress

security@wordfence.com

CWE-502

2024-09-24

CVE-2022-2439

Published: September 24, 2024

CVE-2024-8514

Prisna GWT – Google Website Translator plugin for WordPress

security@wordfence.com

CWE-502

2024-09-25

CVE-2024-8514

Published: September 25, 2024

CVE-2024-43191

Published: September 26, 2024

IBM ManageIQ

psirt@us.ibm.com

CWE-502

2024-09-26

CVE-2024-43191

CVE-2024-9314

Published: October 5, 2024

Rank Math SEO

security@wordfence.com

CWE-502

2024-10-05

CVE-2024-9314

CVE-2024-9005

7.1

UNKNOWN

CWE-502

cybersecurity@se.com

2024-10-08

CVE-2024-9005

Published: October 8, 2024

CVE-2021-4451

6.6

NinjaFirewall plugin for WordPress

security@wordfence.com

CWE-502

2024-10-16

CVE-2021-4451

SIMATIC STEP 7 Safety V16

CVE-2023-32735

6.5

CWE-502

productcert@siemens.com

2024-07-09

CVE-2023-32735

CVE-2024-4699

D-Link DAR-8000-10

CWE-502

cna@vuldb.com

2024-05-14

CVE-2024-4699

CVE-2024-5351

anji-plus AJ-Report

CWE-502

cna@vuldb.com

2024-05-26

CVE-2024-5351

Published: May 26, 2024

CVE-2024-5352

anji-plus AJ-Report

CWE-502

cna@vuldb.com

2024-05-26

CVE-2024-5352

Published: May 26, 2024

CVE-2024-6441

ORIPA

CWE-502

cna@vuldb.com

2024-07-02

CVE-2024-6441

Published: July 2, 2024

CVE-2023-32737

SIMATIC STEP 7 Safety

CWE-502

productcert@siemens.com

2024-07-09

CVE-2023-32737

CVE-2024-6644

zmops ArgusDBM

CWE-502

cna@vuldb.com

2024-07-10

CVE-2024-6644

Published: July 10, 2024

CVE-2024-6645

WuKongOpenSource Wukong_nocode

CWE-502

cna@vuldb.com

2024-07-10

CVE-2024-6645

Published: July 10, 2024

CVE-2024-6943

ZhongBangKeJi CRMEB

CWE-502

cna@vuldb.com

2024-07-21

CVE-2024-6943

Published: July 21, 2024

CVE-2024-6944

ZhongBangKeJi CRMEB

CWE-502

cna@vuldb.com

2024-07-21

CVE-2024-6944

Published: July 21, 2024

CVE-2024-7067

Ecommerce-Laravel-Bootstrap

CWE-502

cna@vuldb.com

2024-07-24

CVE-2024-7067

Published: July 24, 2024

CVE-2024-34075

6.2

kurwov

security-advisories@github.com

2024-05-03

CWE-502

CVE-2024-34075

IBM SDK, Java Technology Edition

CVE-2023-38264

5.9

psirt@us.ibm.com

CWE-502

2024-05-14

CVE-2023-38264

MotoPress Timetable and Event Schedule

CVE-2024-39630

5.5

audit@patchstack.com

CWE-502

2024-08-01

CVE-2024-39630

Published: August 1, 2024

CVE-2024-4606

5.4

Ultimate Store Kit Elementor Addons

audit@patchstack.com

CWE-502

2024-05-14

CVE-2024-4606

WooCommerce Social Login

CVE-2024-37502

5.4

audit@patchstack.com

CWE-502

2024-07-09

CVE-2024-37502

WP MEDIA SAS Search & Replace

CVE-2024-38759

5.4

audit@patchstack.com

CWE-502

2024-07-22

CVE-2024-38759

langchain-ai/langchain

CVE-2024-5998

5.2

CWE-502

security@huntr.dev

2024-09-17

CVE-2024-5998

Published: September 17, 2024

CVE-2024-9917

4.9

HuangDou UTCMS

CWE-502

cna@vuldb.com

2024-10-13

CVE-2024-9917

Published: October 13, 2024

CVE-2024-9953

4.9

CERT VINCE software

CWE-502

cret@cert.org

2024-10-14

CVE-2024-9953

Published: October 14, 2024

CVE-2024-34433

4.4

One Click Demo Import

audit@patchstack.com

CWE-502

2024-05-14

CVE-2024-34433

WebToffee Order Export & Order Import for WooCommerce

CVE-2024-34751

4.4

audit@patchstack.com

CWE-502

2024-05-16

CVE-2024-34751

Published: May 16, 2024

CVE-2024-29040

4.3

Trusted Computing Group's (TCG) TPM2 Software Stack (TSS)

security-advisories@github.com

CWE-502

2024-06-28

CVE-2024-29040

Published: June 28, 2024

CVE-2024-47836

3.5

Admidio

security-advisories@github.com

CWE-502

2024-10-16

CVE-2024-47836

Dell PowerProtect DM5500

CVE-2024-6525

2.7

D-Link DAR-7000

CWE-502

cna@vuldb.com

2024-07-05

CVE-2024-6525

Published: July 5, 2024

CVE-2024-22460

2.2

security_alert@emc.com

CWE-502

2024-05-08

CVE-2024-22460

Published: May 8, 2024

CVE-2024-26579

Apache InLong

security@apache.org

CWE-502

2024-05-08

CVE-2024-26579

Published: May 8, 2024

CVE-2024-3467

AVEVA PI Asset Framework Client

ics-cert@hq.dhs.gov

CWE-502

2024-06-12

CVE-2024-3467

Published: June 12, 2024

CVE-2024-3468

AVEVA PI Web API

ics-cert@hq.dhs.gov

CWE-502

2024-06-12

CVE-2024-3468

Published: June 12, 2024

CVE-2023-46801

Apache Linkis

security@apache.org

CWE-502

2024-07-15

CVE-2023-46801

Published: July 15, 2024

CVE-2023-49566

Apache Linkis

security@apache.org

CWE-502

2024-07-15

CVE-2023-49566

Published: July 15, 2024

CVE-2024-8375

Published: September 19, 2024

Reverb

cve-coordination@google.com

CWE-502

2024-09-19

CVE-2024-8375

CVE-2023-25581

Published: October 10, 2024

pac4j

security-advisories@github.com

CWE-502

2024-10-10

CVE-2023-25581

CVE-2024-47074