CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- dedecmsDedeCMS makehtml_archives_action.php sql injection6.3 Medium
- dedecmsDedeCMS makehtml_map.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS makehtml_rss_action.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS makehtml_js_action.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS makehtml_spec.php cross-site request forgery4.3 Medium
- uvdesk community-skeleton, uvdesk/community-skeleton +1 moreImproper Privilege Management in uvdesk/community-skeleton7.1 High
- dedecmsDedeCMS member_rank.php cross-site request forgery4.3 Medium
- clavister e10, e80 +1 moreClavister E10/E80 Setting cross-site request forgery4.3 Medium
- axiosys bento4An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the...8.1 High
- axiosys bento4An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the...9.8 Critical
- axiosys bento4Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute...8.8 High
- axiosys bento4Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute...9.8 Critical
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in...7.5 High
- axiosys bento4An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in...2.7 Low
- axiosys bento4An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in...7.5 High
- axiosys bento4An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap overflow in AP4_Dec3Atom...6.5 Medium
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function...9.8 Critical
- tenda ax1803, ax1803 firmware +1 moreTenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function...9.8 Critical
- lepton-cms leptoncmsFile Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute...8.8 High
- alldataAn issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a...8.3 High
- alldataAlldata v0.4.6 was discovered to contain a SQL injection vulnerability via the tablename...9.8 Critical
- seeyonao seeyonoaAn issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code...9.8 Critical
- gbgplc instinctA DOM-based open redirection in the returnUrl parameter of INSTINCT UI Web Client 6.5.0 allows...7.3 High
- alldataAlldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information...7.5 High
- alldataAlldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be...9.8 Critical
- alldataAlldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface...9.1 Critical
- xiaocheng-keji 71cms, 711cms +1 moreServer Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthenticated...8.6 High
- No product listedAn issue was discovered in Softing uaToolkit Embedded before 1.41.1. When a subscription with a...5.1 Medium
github.com/ca17/teamsacsGoCA17 TeamsACS Cross Site Scripting vulnerability6.1 Medium- kofax power pdfKofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- kofax power pdfKofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- clavister e10, e80 +1 moreClavister E10/E80 Misc Settings Page MiscSettings cross site scripting2.4 Low
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System cross site scripting3.5 Low
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System save_users improper authorization5.4 Medium
- francoisjacquet rosariosisfrancoisjacquet RosarioSIS Add Portal Note cross site scripting3.5 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability7.5 High
- centreon, centreon web +1 moreCentreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability8.8 High
- centreon, centreon web +1 moreCentreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability7.2 High
- centreon, centreon web +1 moreCentreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability7.2 High
- Show moreLoading…