CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- centreon, centreon web +1 moreCentreon updateLCARelation SQL Injection Remote Code Execution Vulnerability7.2 High
- centreon, centreon web +1 moreCentreon updateGroups SQL Injection Remote Code Execution Vulnerability7.2 High
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability9.8 Critical
- tp-link er605, omada er605, omada er605 firmware +2 moreTP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability7.5 High
- centreon, centreon web +1 moreCentreon updateDirectory SQL Injection Remote Code Execution Vulnerability8.8 High
- dotcms, dotcms core +1 moreDatabase Credential Exposure in the Logs4.5 Medium
- dotcms, dotcms core +1 moreIn dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is...4.5 Medium
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability9.8 Critical
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability9.8 Critical
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability7.5 High
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability9.8 Critical
- kindspells astro-shieldIn Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists7.5 High
- mudler localai, mudler/localai +1 moreCross-Site Request Forgery (CSRF) Vulnerability in mudler/localai6.5 Medium
- computer laboratory management system project laboratory management system, oretnom23 computer laboratory management system +1 moreSourceCodester Computer Laboratory Management System sql injection6.3 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie SQL Injection8.8 High
- rems image accordion gallery appSourceCodester Image Accordion Gallery App add-image.php unrestricted upload6.3 Medium
- piccolo-orm piccolo adminPiccolo Admin's raw SVG loading may lead to complete data compromise from admin page7.7 High
- icewhale casaos-userserviceUsername Enumeration in CasaOS via bypass of CVE-2024-247666.2 Medium
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +130 more +132 moreImproper Input Validation in WIN SON9.8 Critical
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +31 more +33 moreInteger Overflow to Buffer Overflow in Graphics Windows8.4 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +121 more +123 moreBuffer Copy Without Checking Size of Input in Audio7.3 High
- qualcomm auto 4g modem firmware, auto 5g modem-rf firmware, c-v2x 9150 +4 more +6 moreInteger Overflow to Buffer Overflow in Automotive Telematics7.5 High
- qualcomm c-v2x 9150, c-v2x 9150 firmware, qcs410 +24 more +26 moreImproper Input Validation in Automotive Telematics7.5 High
- qualcomm c-v2x 9150 firmware, qca6584au firmware, qca6698aq firmware +4 more +6 moreImproper Input Validation in Automotive Telematics7.3 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +189 more +191 moreBuffer Over-read in Trusted Execution Environment7.8 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +102 more +104 moreIncorrect Type Conversion or Cast in Multi-Mode Call Processor7.5 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +51 more +53 moreImproper input validation in Multi-Mode Call Processor7.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +112 more +114 moreImproper Input Validation in Multi-Mode Call Processor7.5 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +344 more +346 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications8.4 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +360 more +362 moreBuffer Copy Without Checking Size of Input in SPS Applications8.4 High
- linux, linux kernel +1 moreFix memory leak in posix_clock_open()5.5 Medium
- No product listedReplify-Messenger Backup File androidmanifest.xml backup2.4 Low
- averta shortcodes and extra features for phlox themeWordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerability6.4 Medium
- zebra ztc gk420dZebra ZTC GK420d Alert Setup Page settings cross site scripting2.4 Low
- fridgecow smartalarmfridgecow smartalarm Backup File androidmanifest.xml backup2.4 Low
- sequentech admin-consolesequentech admin-console Election Description cross site scripting3.5 Low
- avg antivirus free, bitdefender antivirus, antivirus plus +2 more +4 moreLocal privilege escalation in Bitdefender Total Security (VA-11168)7.8 High
- coolkit ewelink appInsecure Data Storage leading to sensitive Information disclosure.5.7 Medium
- debian linux, linux kernel +1 moreALSA: sh: aica: reorder cleanup operations to avoid UAF bugs7.8 High
- linux, linux kernel +1 moreusb: misc: ljca: Fix double free in error handling path7.8 High
- nuuo nvrmini 2NUUO NVRmini 2 deletefile.php path traversal6.5 Medium
- themify woocommerce product filter, unknown themify +1 moreWooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS6.1 Medium
- themify woocommerce product filter, unknown themify +1 moreWooCommerce Product Filter < 1.4.4 - Reflected XSS4.8 Medium
- themify woocommerce product filter, unknown themify +1 moreWooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF4.7 Medium
- nerdpress hubbub lite, devpups social pug +1 moreHubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access5.3 Medium
- google android, linuxfoundation yocto, mediatek iot yocto +1 more +3 moreIn imgsys, there is a possible information disclosure due to a missing bounds check. This could...6.3 Medium
- google android, linuxfoundation yocto, mediatek mt6761 +23 more +25 moreIn gnss, there is a possible escalation of privilege due to a missing bounds check. This could...6.6 Medium
- google android, linuxfoundation yocto, mediatek mt2713 +45 more +47 moreIn flashc, there is a possible out of bounds write due to an uncaught exception. This could lead...8.4 High
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...4.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible system crash due to an uncaught exception. This could lead to...2.3 Low
- Show moreLoading…