| High |
10 Jul 2024 |
20 Jul 2026 |
CPAI-2024-0560 |
|
CVE-2024-36991 |
Splunk Enterprise Path Traversal (CVE-2024-36991) |
| Critical |
18 Apr 2024 |
9 Jul 2026 |
CPAI-2023-1637 |
|
CVE-2023-6895 |
Hikvision Intercom Broadcasting System Command Injection (CVE-2023-6895) |
| High |
20 Jun 2024 |
1 Jul 2026 |
CPAI-2024-0403 |
|
CVE-2024-4947 |
Google Chrome Type Confusion (CVE-2024-4947) |
| High |
16 Jun 2024 |
30 Jun 2026 |
CPAI-2025-17323 |
|
CVE-2018-17990
CVE-2022-34527
CVE-2023-27216
CVE-2023-44959
CVE-2025-25893
CVE-2025-25894
CVE-2025-25895 |
D-Link DSL-3782 Command Injection (CVE-2018-17990; CVE-2022-34527; CVE-2023-27216; CVE-2023-44959; CVE-2025-25893; CVE-2025-25894; CVE-2025-25895) |
| Critical |
31 Mar 2024 |
30 Jun 2026 |
CPAI-2026-8164 |
|
CVE-2024-1212
CVE-2026-8037 |
Progress Kemp LoadMaster Command Injection (CVE-2024-1212; CVE-2026-8037) |
| Critical |
26 Mar 2024 |
30 Jun 2026 |
CPAI-2026-8139 |
|
|
Python Functions Remote Code Execution |
| High |
16 Jun 2024 |
28 Jun 2026 |
CPAI-2025-17243 |
|
CVE-2018-17990
CVE-2022-34527
CVE-2023-27216
CVE-2023-44959
CVE-2025-25893
CVE-2025-25894
CVE-2025-25895 |
D-Link DSL-3782 Command Injection (CVE-2018-17990; CVE-2022-34527; CVE-2023-27216; CVE-2023-44959; CVE-2025-25893; CVE-2025-25894; CVE-2025-25895) |
| High |
14 Mar 2024 |
28 Jun 2026 |
CPAI-2018-2710 |
|
CVE-2018-1000600 |
Jenkins GitHub Plugin Server-Side Request Forgery (CVE-2018-1000600) |
| Medium |
11 Feb 2024 |
28 Jun 2026 |
CPAI-2017-1802 |
|
CVE-2017-9506 |
Atlassian OAuth Plugin Server Side Request Forgery (CVE-2017-9506) |
| Critical |
5 Aug 2024 |
15 Jun 2026 |
CPAI-2024-7333 |
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533 |
Embedded Devices Web Servers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533) |
| Critical |
27 May 2024 |
5 Jun 2026 |
CPAI-2024-6974 |
|
CVE-2024-34716 |
PrestaShop Cross-Site Scripting (CVE-2024-34716) |
| Critical |
27 May 2024 |
4 Jun 2026 |
CPAI-2024-6954 |
|
CVE-2024-34716 |
PrestaShop Cross-Site Scripting (CVE-2024-34716) |
| Critical |
5 Aug 2024 |
3 Jun 2026 |
CPAI-2024-6952 |
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533 |
TOTOLINK Multiple Routers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533) |
| High |
16 May 2024 |
28 May 2026 |
CPAI-2024-3859 |
|
CVE-2024-31445 |
Cacti SQL Injection (CVE-2024-31445) |
| Critical |
25 Mar 2024 |
28 May 2026 |
CPAI-2023-1609 |
|
CVE-2023-20048 |
Cisco Firepower Management Center Command Injection (CVE-2023-20048) |
| High |
27 Jun 2024 |
26 May 2026 |
CPAI-2024-0525 |
|
CVE-2024-5274 |
Google Chrome Type Confusion (CVE-2024-5274) |
| Critical |
5 Aug 2024 |
25 May 2026 |
CPAI-2024-6831 |
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533 |
TOTOLINK Multiple Routers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533) |
| High |
29 Sep 2024 |
24 May 2026 |
CPAI-2024-0859 |
|
CVE-2024-7965 |
Google Chrome V8 Heap Corruption (CVE-2024-7965) |
| Critical |
26 Mar 2024 |
19 May 2026 |
CPAI-2026-4980 |
|
|
Python Functions Remote Code Execution |
| High |
29 Aug 2024 |
14 May 2026 |
CPAI-2024-0686 |
|
CVE-2024-6366 |
WordPress User Profile Builder Plugin Arbitrary File Upload (CVE-2024-6366) |
| High |
27 Oct 2024 |
7 May 2026 |
CPAI-2026-4163 |
|
CVE-2024-9264
CVE-2026-27876 |
Grafana SQL Injection (CVE-2024-9264; CVE-2026-27876) |
| Critical |
15 Sep 2024 |
5 May 2026 |
CPAI-2025-12680 |
|
CVE-2024-28986
CVE-2024-28988
CVE-2025-26399
CVE-2025-40553 |
SolarWinds Web Help Desk Insecure Deserialization (CVE-2024-28986; CVE-2024-28988; CVE-2025-26399; CVE-2025-40553) |
| High |
16 May 2024 |
4 May 2026 |
CPAI-2024-6177 |
|
CVE-2024-3721 |
TBK DVR Command Injection (CVE-2024-3721) |
| High |
26 Feb 2024 |
29 Apr 2026 |
CPAI-2024-6143 |
|
CVE-2024-1708 |
ConnectWise ScreenConnect Remote Code Execution (CVE-2024-1708) |
| Critical |
20 Feb 2024 |
23 Apr 2026 |
CPAI-2017-1803 |
|
CVE-2017-7921 |
Hikvision Multiple Products Improper Authentication (CVE-2017-7921) |
| Critical |
2 Apr 2024 |
20 Apr 2026 |
CPAI-2023-3408 |
|
CVE-2022-32039
CVE-2022-32040
CVE-2022-32043
CVE-2023-37710
CVE-2023-37714
CVE-2023-37715
CVE-2023-37716
CVE-2023-37717
CVE-2023-37718
CVE-2023-37719
CVE-2023-37721
CVE-2023-37722
CVE-2023-37723
CVE-2023-51093 |
Tenda Multiple Products Stack Overflow (CVE-2022-32039; CVE-2022-32040; CVE-2022-32043; CVE-2023-37710; CVE-2023-37714; CVE-2023-37715; CVE-2023-37716; CVE-2023-37717; CVE-2023-37718; CVE-2023-37719; CVE-2023-37721; CVE-2023-37722; CVE-2023-37723; CVE-2023-51093) |
| Critical |
4 Dec 2024 |
14 Apr 2026 |
CPAI-2026-2908 |
|
CVE-2024-39226
CVE-2026-26791
CVE-2026-26792
CVE-2026-26793
CVE-2026-26795 |
GL-iNet Multiple Products Command Injection (CVE-2024-39226; CVE-2026-26791; CVE-2026-26792; CVE-2026-26793; CVE-2026-26795) |
| Critical |
24 Dec 2024 |
26 Mar 2026 |
CPAI-2024-5649 |
|
CVE-2024-56145 |
Craft CMS Remote Code Execution (CVE-2024-56145) |
| Critical |
29 Aug 2024 |
26 Mar 2026 |
CPAI-2021-2978 |
|
CVE-2021-33044 |
Dahua Security Multiple Products Authentication Bypass (CVE-2021-33044) |
| Critical |
11 Dec 2024 |
23 Mar 2026 |
CPAI-2024-1150 |
|
CVE-2024-45216 |
Apache Solr Authentication Bypass (CVE-2024-45216) |
| High |
19 Dec 2024 |
22 Mar 2026 |
CPAI-2024-5589 |
|
CVE-2024-53376 |
CyberPanel Command Injection (CVE-2024-53376) |
| High |
29 Feb 2024 |
19 Mar 2026 |
CPAI-2026-1857 |
|
|
TOTOLINK LR1200GB Authentication Bypass |
| Critical |
5 Aug 2024 |
15 Mar 2026 |
CPAI-2024-5517 |
|
CVE-2024-31809
CVE-2024-42736
CVE-2024-42737
CVE-2024-42738
CVE-2024-42739
CVE-2024-42740
CVE-2024-42741
CVE-2024-42742
CVE-2024-42743
CVE-2024-42744
CVE-2024-42745
CVE-2024-42747
CVE-2024-42748
CVE-2024-43533 |
TOTOLINK Multiple Routers Command Injection (CVE-2024-31809; CVE-2024-42736; CVE-2024-42737; CVE-2024-42738; CVE-2024-42739; CVE-2024-42740; CVE-2024-42741; CVE-2024-42742; CVE-2024-42743; CVE-2024-42744; CVE-2024-42745; CVE-2024-42747; CVE-2024-42748; CVE-2024-43533) |
| Critical |
25 Mar 2024 |
12 Mar 2026 |
CPAI-2023-1601 |
|
CVE-2023-23333 |
Contec Solarview Compact Firmware Command Injection (CVE-2023-23333) |
| Critical |
29 Oct 2024 |
9 Mar 2026 |
CPAI-2025-12937 |
|
CVE-2024-8573
CVE-2024-8575
CVE-2024-8576
CVE-2024-8577
CVE-2024-8578
CVE-2024-8579
CVE-2025-5734
CVE-2025-5735
CVE-2025-5736
CVE-2025-5737
CVE-2025-5738
CVE-2025-5739
CVE-2025-5785
CVE-2025-5786 |
TOTOLINK Multiple Products Buffer Overflow (CVE-2024-8573; CVE-2024-8575; CVE-2024-8576; CVE-2024-8577; CVE-2024-8578; CVE-2024-8579; CVE-2025-5734; CVE-2025-5735; CVE-2025-5736; CVE-2025-5737; CVE-2025-5738; CVE-2025-5739; CVE-2025-5785; CVE-2025-5786) |
| High |
11 Mar 2024 |
9 Mar 2026 |
CPAI-2022-3161 |
|
CVE-2022-35870 |
Inductive Automation Ignition Insecure Deserialization (CVE-2022-35870) |
| Critical |
23 Dec 2024 |
8 Mar 2026 |
CPAI-2022-2160 |
|
CVE-2022-23227 |
NUUO NVRmini Authentication Bypass (CVE-2022-23227) |
| Critical |
2 Apr 2024 |
2 Mar 2026 |
CPAI-2023-3244 |
|
CVE-2022-32039
CVE-2022-32040
CVE-2022-32043
CVE-2023-37710
CVE-2023-37714
CVE-2023-37715
CVE-2023-37716
CVE-2023-37717
CVE-2023-37718
CVE-2023-37719
CVE-2023-37721
CVE-2023-37722
CVE-2023-37723
CVE-2023-51093 |
Tenda Multiple Products Stack Overflow (CVE-2022-32039; CVE-2022-32040; CVE-2022-32043; CVE-2023-37710; CVE-2023-37714; CVE-2023-37715; CVE-2023-37716; CVE-2023-37717; CVE-2023-37718; CVE-2023-37719; CVE-2023-37721; CVE-2023-37722; CVE-2023-37723; CVE-2023-51093) |
| Critical |
5 Nov 2024 |
2 Mar 2026 |
CPAI-2024-1036 |
|
CVE-2024-51567
CVE-2024-51568 |
CyberPanel Command Injection (CVE-2024-51567; CVE-2024-51568) |
| Critical |
10 Jul 2024 |
1 Mar 2026 |
CPAI-2025-12690 |
|
CVE-2023-33831
CVE-2025-69985 |
Frangoteam FUXA Remote Code Execution (CVE-2023-33831; CVE-2025-69985) |
| High |
29 Feb 2024 |
25 Feb 2026 |
CPAI-2025-12580 |
|
CVE-2023-50445
CVE-2025-67089 |
GL.iNet Devices Command Injection (CVE-2023-50445; CVE-2025-67089) |
| High |
4 Jun 2024 |
24 Feb 2026 |
CPAI-2024-0352 |
|
CVE-2024-21683 |
Atlassian Confluence Remote Code Execution (CVE-2024-21683) |
| High |
23 Dec 2024 |
19 Feb 2026 |
CPAI-2024-5506 |
|
CVE-2023-6909
CVE-2024-1483
CVE-2024-2928 |
LF Projects MLflow Path Traversal (CVE-2023-6909; CVE-2024-1483; CVE-2024-2928) |
| Critical |
17 Jun 2024 |
17 Feb 2026 |
CPAI-2024-5470 |
|
CVE-2024-27348 |
Apache HugeGraph Remote Code Execution (CVE-2024-27348) |
| High |
12 Aug 2024 |
15 Feb 2026 |
CPAI-2021-2929 |
|
CVE-2021-35215 |
SolarWinds Orion Platform Insecure Deserialization (CVE-2021-35215) |
| Critical |
24 Nov 2024 |
9 Feb 2026 |
CPAI-2024-1048 |
|
|
ALFA Webshell Over HTTP |
| High |
26 Sep 2024 |
9 Feb 2026 |
CPAI-2022-2132 |
|
CVE-2022-25369 |
DynamicWeb Authentication Bypass (CVE-2022-25369) |
| High |
3 Sep 2024 |
9 Feb 2026 |
CPAI-2024-0737 |
|
CVE-2024-32766 |
myQNAPcloud Command Injection (CVE-2024-32766) |
| Critical |
29 Jul 2024 |
9 Feb 2026 |
CPAI-2018-2779 |
|
CVE-2018-1000517 |
BusyBox Buffer Overflow (CVE-2018-1000517) |
| High |
2 Dec 2024 |
9 Feb 2026 |
CPAI-2009-0623 |
|
CVE-2009-2754 |
Informix Storage Manager Buffer Overflow (CVE-2009-2754) |