CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- red hat openshift container platform 4.14, openshift container platform 4.15 +1 more Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure 6.8 Medium
- delta electronics cncsoft-g2 dopsoft, cncsoft-g2 +1 more Stack-based Buffer Overflow vulnerability in Delta Electronics CNCSoft-G2 DOPSoft 7.8 High
- donbermoy pisay online e-learning system SourceCodester Pisay Online E-Learning System controller.php unrestricted upload 7.3 High
- phlex-ruby phlex Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex 7.1 High
- mediawiki An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki... 6.1 Medium
- mediawiki vector skin An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x... 6.5 Medium
- oscommerce osCommerce all-products cross site scripting 4.3 Medium
- measuresoft scadapro, scadapro server +1 more Measuresoft ScadaPro Improper Access Control 6.8 Medium
- intel ipmi, dell idrac8, intel * +2 more Insufficient Randomness When Validating an IPMI Authenticated Session 9.1 Critical
- zscaler client connector Anti-Tampering bypass via Repair App functionality 8.8 High
-
sqlparseRoot Duplicate Advisory: sqlparse parsing heavily nested list leads to Denial of Service 7.5 High - hashicorp vault, vault enterprise +1 more Vault Enterprise Leaks Sensitive HTTP Request Headers in the Audit Log When Deployed With a Performance Standby Node 5.5 Medium
- ibm storage scale IBM Storage Scale session fixation 5.0 Medium
- foxit reader, pdf editor, pdf reader +2 more A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode... 8.8 High
- foxit reader, foxitsoftware foxit reader, foxit pdf editor +1 more +3 more A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox... 8.8 High
- foxit reader, foxitsoftware foxit reader, foxit pdf editor +1 more +3 more A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997... 8.8 High
- linux kernel In the Linux kernel through 6.7.2, an untrusted hypervisor can inject virtual interrupts 0 and 14... 7.1 High
- hitachi energy sdm600 A vulnerability exists in the web-authentication component of the SDM600. If exploited an... 8.0 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu500 firmware +1 more A vulnerability exists in the RTU500 that allows for authenticated and authorized users to... 7.2 High
- hitachi energy sdm600 A vulnerability exists in the too permissive HTTP response header web server settings of the... 7.6 High
- macpaw xadmaster XADMaster may not apply quarantine attribute correctly to extracted files 5.5 Medium
- adive framework Múltiple vulnerabilities on Adive Framework 7.6 High
- adive framework Múltiple vulnerabilities on Adive Framework 7.6 High
- wpcodefactory customer email verification for woocommerce Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness 8.1 High
- horiondigital acf front end editor ACF Front End Editor <= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Update 4.3 Medium
- websmokers zd youtube flv player ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery 8.3 High
- awplife event monster, awordpresslife event monster – manager & ticket booking +1 more Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta 7.5 High
-
nssTuxCare,nsprTuxCare,nspr-develTuxCare +10 more +12 more Update of nss No score - dps telecom netguardian din remote telemetry unit (rtu), dpstele ngdin st +1 more NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities 7.6 High
- unknown leadconnector LeadConnector <= 1.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 6.5 Medium
- levertechadmin google doc embedder Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery 6.4 Medium
- octopus server It was identified that in certain versions of Octopus Server, that a user created with no... 3.5 Low
- apryse webviewer Apryse WebViewer PDF Document cross site scripting 3.5 Low
-
pcapplusplusOSS-Fuzz Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen No score -
hdf5OSS-Fuzz Heap-buffer-overflow in H5O__cache_chk_serialize No score -
quickjsOSS-Fuzz Heap-buffer-overflow in JS_CallInternal No score -
hdf5OSS-Fuzz Heap-buffer-overflow in H5F_addr_encode No score -
libredwgOSS-Fuzz Heap-use-after-free in json_fixed_string No score -
pcapplusplusOSS-Fuzz UNKNOWN READ in pcpp::Packet::destructPacketData No score -
hdf5OSS-Fuzz Heap-buffer-overflow in H5F__accum_free No score -
hdf5OSS-Fuzz Heap-use-after-free in H5FL__blk_gc_list No score -
hdf5OSS-Fuzz UNKNOWN READ in H5SL_first No score -
apache-poiOSS-Fuzz Security exception in java.base/java.util.Arrays.copyOf No score -
jqOSS-Fuzz UNKNOWN READ in jv_array_set No score -
hdf5OSS-Fuzz Heap-buffer-overflow in H5O__chunk_protect No score -
pcapplusplusOSS-Fuzz Segv on unknown address in pcpp::IPv6Layer::~IPv6Layer No score -
pcapplusplusOSS-Fuzz Heap-buffer-overflow in pcpp::TelnetLayer::getFieldLen No score -
graphql-javaOSS-Fuzz Security exception in graphql.schema.GraphQLTypeUtil.simplePrint No score -
pcapplusplusOSS-Fuzz Heap-buffer-overflow in __parse_options No score -
hdf5OSS-Fuzz UNKNOWN READ in H5SL__release_common No score - Show olderLoading…