CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- builderall builder for wordpressWordPress Builderall Builder for WordPress plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- kadence wp gutenberg blocks by kadence blocks, kadencewp gutenberg blocks with ai +1 moreWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adam bowen tax rate uploadWordPress Tax Rate Upload plugin <= 2.4.5 - CSRF leading to Cross Site Scripting (XSS) vulnerability7.1 High
- toastie studio woocommerce social media share buttonsWordPress Woocommerce Social Media Share Buttons plugin <= 1.3.0 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- bdtask multi-store inventory management system, m-store, multi store inventory management system +2 moreBdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery4.3 Medium
- temporal oss ui-serverStored XSS in Timeline View4.3 Medium
- No product listedVMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be...7.1 High
- vmware sd-wan edgeVMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability. A...4.8 Medium
- vmware sd-wan edgeVMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially...7.4 High
- quic-goQUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack7.5 High
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.3 Medium
- progress flowmon, flowmon os +1 moreFlowmon Unauthenticated Command Injection Vulnerability10.0 Critical
- bytecodealliance wasmtimeWasmtime vulnerable to panic when using a dropped extenref-typed element segment3.3 Low
- hikvision ds-7604ni-k1 / 4p(b), ds-7604ni-k1\/4p\(b\), ds-7604ni-m1/4p +15 more +17 moreThere is a command injection vulnerability in some Hikvision NVRs. This could allow an...7.2 High
- hikvision ds-7604nxi-k1/4pThere is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker...3.8 Low
- hikvision ds-7604ni-k1 / 4p(b)There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient...2.7 Low
- dji matrice 300, matrice m30, mavic 3 +9 more +11 moreA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone...6.8 Medium
- dji matrice 300, matrice m30, mavic 3 +9 more +11 moreA Improper Validation of Array Index issue affecting the v2_sdk_service running on a set of DJI...6.8 Medium
- dji matrice 300, matrice m30, mavic 3 +9 more +11 moreA Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on...6.8 Medium
- dji matrice 300, matrice m30, mavic 3 +4 more +6 moreA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone...3.0 Low
- dji matrice 300, matrice m30, mavic 3 +4 more +6 moreA Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone...3.0 Low
- dji matrice 300, matrice m30, mavic 3 +4 more +6 moreA Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI...6.6 Medium
- dji mini 3 pro** DISPUTED ** An Improper Input Validation vulnerability affecting the FTP service running on...3.0 Low
- dji mini 3 pro, mini 3 pro firmware +1 more** DISPUTED ** A Missing Authentication for Critical Function issue affecting the HTTP service...5.2 Medium
- dji matrice 300, matrice m30, mavic 3 +4 more +6 moreA Buffer Copy without Checking Size of Input issue affecting the v2_sdk_service running on a set...3.0 Low
- rapid7 insightvmRapid7 InsightVM Sensitive Information Exposure via URL3.3 Low
- studiopress genesis blocksGenesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Content6.4 Medium
- a3rev product sort and display for woocommerceProduct Sort and Display for WooCommerce <= 2.4.1 - Missing Authorization6.5 Medium
- djamio1988 sharkdropship & affiliate for aliexpress, wooproductimporter sharkdropship dropshipping and affiliate +1 moreSharkdropship for AliExpress Dropshipping and Affiliate <= 2.2.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion5.3 Medium
perl-DBD-SQLiteopenSUSESecurity update for perl-DBD-SQLiteNo score- syam mohan wpfront user role editor, wpfront user role editor +1 moreWPFront User Role Editor <= 3.2.1.11184 - Limited Information Exposure4.3 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support5.4 Medium
- debian linux, linux kernel +1 morenet: stmmac: xgmac: fix handling of DPP safety error for DMA channels5.5 Medium
- linux, linux kernel +1 morewifi: cfg80211: detect stuck ECSA element in probe resp5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: improve CSA/ECSA connection refusal5.5 Medium
- linux, linux kernel +1 morenetdevsim: avoid potential loop in nsim_dev_trap_report_work()5.5 Medium
- linux, linux kernel +1 morenet: atlantic: Fix DMA mapping for PTP hwts ring5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreinet: read sk->sk_family once in inet_recv_error()5.5 Medium
- linux, linux kernel +1 morex86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section5.5 Medium
- linux, linux kernel +1 morerxrpc: Fix delayed ACKs to not set the reference serial number5.5 Medium
- linux, linux kernel +1 moreaf_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.5.5 Medium
- debian linux, linux kernel +1 moreppp_async: limit MRU to 64K5.5 Medium
- linux, linux kernel +1 morex86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups7.1 High
- linux, linux kernel +1 morelibceph: just wait for more data to be available on the socket8.2 High
- debian linux, linux kernel +1 morenetfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations7.1 High
- linux, linux kernel +1 moredrm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'7.1 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreblk-mq: fix IO hang from sbitmap wakeup race4.7 Medium
- debian linux, linux kernel +1 morePM / devfreq: Synchronize devfreq_monitor_[start/stop]5.5 Medium
- Show moreLoading…