CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- chatikobo internship portal management systemSourceCodester Internship Portal Management System check_admin.php sql injection6.3 Medium
- computer laboratory management system project laboratory management system, oretnom23 computer laboratory management system +1 moreSourceCodester Computer Laboratory Management System sql injection6.3 Medium
- dell dss 8440 firmware, emc storage nx3240 firmware, emc storage nx3340 firmware +91 more +93 moreDell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management...7.9 High
- fujidenolo solutions co., ltd. sonicdicom media viewerUncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which...7.8 High
- ays pro survey makerInsufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a...5.3 Medium
- ays pro survey makerSurvey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this...6.1 Medium
- cartflows woocommerce cart abandonment recoveryWooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF6.8 Medium
- kreaturamedia layersliderThe LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup...9.8 Critical
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial6.4 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box6.4 Medium
- panwei eoffice oa, weaver e-office +1 morePanwei eoffice OA Backend save_image.php path traversal4.7 Medium
- campcodes online patient record management systemCampcodes Online Patient Record Management System login.php sql injection7.3 High
- mayurik php task management systemSourceCodester PHP Task Management System edit-task.php sql injection6.3 Medium
- mayurik php task management systemSourceCodester PHP Task Management System task-details.php sql injection6.3 Medium
- mayurik php task management systemSourceCodester PHP Task Management System admin-manage-user.php sql injection6.3 Medium
openh264OSS-FuzzUse-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplayNo score- mayurik php task management systemSourceCodester PHP Task Management System admin-password-change.php sql injection6.3 Medium
- mayurik php task management systemSourceCodester PHP Task Management System attendance-info.php sql injection6.3 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote...8.8 High
- google chromeUse after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote...8.8 High
- emlogCross Site Scripting (XSS) vulnerability in emlog version Pro 2.3, allow remote attackers to...6.1 Medium
- sem-cms semcmsAn issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code,...9.8 Critical
- beescmsArbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute...9.8 Critical
- sem-cms semcmsSQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive...7.5 High
- sem-cms semcmsSQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive...6.5 Medium
- wuzhicmsAn issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code...6.5 Medium
- phpgurukul men salon management systemSQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote...9.8 Critical
- netgear r6850 firmwareNetgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the...8.0 High
- netgear r6850 firmwareAn information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to...7.5 High
- netgear r6850 firmwareAn information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain...5.3 Medium
- netgear r6850 firmwareAn information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain...7.5 High
- netgear r6850 firmwareNetgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4...9.8 Critical
- arm mbed tlsIn Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure...9.1 Critical
- dolibarr erp\/crmDolibarr ERP CRM Code Injection vulnerability during installation8.8 High
- webasyst webasyst-frameworkCross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary...5.4 Medium
- trustedfirmware mbed tlsAn issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the...5.4 Medium
- mbed mbedtls, trustedfirmware mbed tls +1 moreAn issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the...6.5 Medium
- axigen mail serverAn issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows...6.7 Medium
- cornerstoneplatform csapp lab3Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker...9.8 Critical
- puwellcloudtech 360eyes proPuwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive...6.5 Medium
- python pillow, debian linux, fedoraproject fedora +2 morePillow buffer overflow vulnerability6.7 Medium
- No product listedCross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute...6.1 Medium
- leantimeCross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code...7.6 High
- macro-expert macro expert, macroexpert +1 moreMacro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%...7.8 High
- friendicaCross Site Scripting (XSS) vulnerability in Friendica versions after v.2023.12, allows a remote...6.1 Medium
- friendicaServer Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, allows a...9.1 Critical
- gibbonedu gibbonGibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template...9.8 Critical
- limesurveyCross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817...6.1 Medium
- dlink covr 1100, covr 1102, covr 1103 +1 more +3 moreAn issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware...8.1 High
- Show moreLoading…