CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- linux, linux kernel +1 moredrm/amd/display: Fix disable_otg_wa logic5.5 Medium
- linux, linux kernel +1 moreum: time-travel: fix time corruption5.0 Medium
- linux, linux kernel +1 moredrm/amdkfd: Fix lock dependency warning with srcu5.5 Medium
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button6.4 Medium
- extend themes colibri page builderColibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- linux, linux kernel +1 morearm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD5.5 Medium
- linux, linux kernel +1 morenet/sched: flower: Fix chain template offload7.1 High
- linux, linux kernel +1 morenetfilter: nft_limit: reject configurations that cause integer overflow5.5 Medium
- openatom openharmonyArkcompiler runtime has a stack overflow svulnerability3.3 Low
- openatom openharmonyArkcompiler runtime has a use after free vulnerability5.5 Medium
- openatom openharmonyFs has an improper input validation vulnerability8.1 High
- openatom openharmonyArkcompiler runtime has an out-of-bounds write vulnerability6.5 Medium
- openatom openharmonyBundlemanager has an authentication bypass vulnerability7.7 High
- openatom openharmonyTelephony has an improper input validation vulnerability6.5 Medium
- openatom openharmonyCamera has a use after free vulnerability3.3 Low
- openatom openharmonyAVSession has a use after free vulnerability6.5 Medium
- openatom openharmonyAudio has an improper preservation of permissions vulnerability3.3 Low
- openatom openharmonyArkui has a type confusion vulnerability3.3 Low
- linux, linux kernel +1 moredrm/msm/dpu: check for valid hw_pp in dpu_encoder_helper_phys_cleanup5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: fix RCU use in TDLS fast-xmit7.1 High
- debian linux, linux kernel +1 moretunnels: fix out of bounds access when building IPv6 PMTU error9.1 Critical
- debian linux, linux kernel +1 morehwmon: (coretemp) Fix out-of-bounds memory access7.8 High
- debian linux, linux kernel +1 moretipc: Check the bearer type before calling tipc_udp_nl_bearer_add()7.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Implement bounds check for stream encoder creation in DCN3017.0 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morexhci: handle isoc Babble and Buffer Overrun events properly7.8 High
- linux, linux kernel +1 morebcachefs: grab s_umount only if snapshotting5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Fix an NULL dereference bug5.5 Medium
- linux, linux kernel +1 moredrm/sched: fix null-ptr-deref in init entity5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: fix use-after-free bug7.8 High
- secupress, secupress with simple ssl – simple and performant security +1 moreSecuPress Free — WordPress Security <= 2.2.5.1 - Cross-Site Request Forgery to Banned IP Address4.3 Medium
- echoplugins creative addons for elementorCreative Addons for Elementor <= 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets6.4 Medium
- joe dolson my calendarMy Calendar < 3.4.24 - Authenticated Stored XSS5.4 Medium
- unknown page builder gutenberg blocks, godaddy coblocks +1 morePage Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSS5.4 Medium
- samsung cameraImproper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12...5.9 Medium
- samsung mobile themestore, samsung galaxy themes +1 moreImproper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05...5.1 Medium
- samsung smartthingsImproper verification of intent by broadcast receiver vulnerability in SmartThings prior to...5.9 Medium
- samsung mobile data store, samsung cloud +1 moreImproper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows...4.4 Medium
- samsung payUse of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows...6.2 Medium
- google android, samsung mobile devices +1 moreOut-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR...7.3 High
- samsung android, samsung mobile devices +1 moreOut-of-bound Write vulnerability in text parsing implementation of libsdffextractor prior to SMR...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024...5.9 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024...8.4 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR...8.4 High
- samsung android, samsung mobile devices +1 moreOut-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr...5.6 Medium
- samsung android, samsung mobile devices +1 moreImproper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024...4.2 Medium
- intelbras hdcvi 1008, hdcvi 1016, mhdx 1004 +9 more +11 moreIntelbras HDCVI 1016 HTTP GET Request cap.js information disclosure5.3 Medium
- Show moreLoading…