CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- debian linux, linux kernel +1 morenilfs2: fix data corruption in dsync block recovery for small block sizes7.8 High
- debian linux, linux kernel +1 morenilfs2: fix hang in nilfs_lookup_dirty_data_buffers()5.5 Medium
- debian linux, linux kernel +1 morecrypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked5.5 Medium
- linux, linux kernel +1 morewifi: iwlwifi: fix double-free bug7.8 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: fix a crash when we run out of stations5.5 Medium
- linux, linux kernel +1 moresmb: Fix regression in writes when non-standard maximum write size negotiated8.3 High
- linux, linux kernel +1 moreKVM: arm64: Fix circular locking dependency5.5 Medium
- linux, linux kernel +1 morenet: stmmac: protect updates of 64-bit statistics counters7.5 High
- debian linux, linux kernel +1 moreceph: prevent use-after-free in encode_cap_msg()8.8 High
- debian linux, linux kernel +1 morefs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super5.5 Medium
- debian linux, linux kernel +1 morexen/events: close evtchn after mapping cleanup5.5 Medium
- linux, linux kernel +1 morefs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats5.5 Medium
- debian linux, linux kernel +1 morenilfs2: fix potential bug in end_buffer_async_write5.5 Medium
- linux, linux kernel +1 moreKVM: s390: vsie: fix race during shadow creation4.7 Medium
- linux, linux kernel +1 morecan: j1939: prevent deadlock by changing j1939_socks_lock to rwlock5.5 Medium
- debian linux, linux kernel +1 morecan: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)7.8 High
- voila-dashboards voilaVoilà Local file inclusion7.5 High
- red hat openshift virtualization 4Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes6.5 Medium
- red hat openshift virtualization 4Cnv: information disclosure through the usage of vm-dump-metrics4.3 Medium
- open automation software oas platform, openautomationsoftware open automation software +1 moreAn improper input validation vulnerability exists in the OAS Engine User Configuration...4.9 Medium
- open automation software oas platform, openautomationsoftware open automation software +1 moreA denial of service vulnerability exists in the OAS Engine File Data Source Configuration...4.9 Medium
- open automation software oas platform, openautomationsoftware open automation software +1 moreA file write vulnerability exists in the OAS Engine Save Security Configuration functionality of...4.9 Medium
- open automation software oas platform, openautomationsoftware open automation software +1 moreA file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open...4.9 Medium
- mphrx minerva, rapid7 minerva armor +1 moreRapid7 Minerva Armor Privilege Escalation7.8 High
- chatikobo internship portal management system, internship portal management system project portal management system +1 moreSourceCodester Internship Portal Management System delete_activity.php sql injection6.3 Medium
- chatikobo internship portal management system, internship portal management system project portal management system +1 moreSourceCodester Internship Portal Management System add_activity.php sql injection6.3 Medium
- chatikobo internship portal management systemSourceCodester Internship Portal Management System edit_activity_query.php sql injection6.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows denial of service5.3 Medium
- chatikobo internship portal management systemSourceCodester Internship Portal Management System edit_activity.php sql injection6.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows, db2 connect server +2 moreIBM Db2 information disclosure6.8 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows denial of service5.3 Medium
- videowhisper live streaming integration plugin, live streaming integration, videowhisper.com videowhisper live streaming integration +2 moreWordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)9.0 Critical
- cwiclyWordPress Cwicly plugin <= 1.4.0.2 - Auth. Remote Code Execution (RCE) vulnerability9.9 Critical
- cantoWordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability10.0 Critical
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially...6.2 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerability9.9 Critical
- inpersttion slivery extenderWordPress Slivery Extender plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability8.5 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software information disclosure6.3 Medium
- chatikobo internship portal management system, internship portal management system project portal management system +1 moreSourceCodester Internship Portal Management System edit_admin_query.php sql injection6.3 Medium
- chatikobo internship portal management systemSourceCodester Internship Portal Management System edit_admin.php sql injection6.3 Medium
h2crates.ioh2 servers vulnerable to degradation of service with CONTINUATION Flood5.3 Medium- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerability9.1 Critical
- jack arturo wp fusion lite, verygoodplugins wp fusion +1 moreWordPress WP Fusion Lite plugin <= 3.41.24 - Remote Code Execution (RCE) vulnerability9.9 Critical
- oxygen builder builder, soflyy oxygen, oxygen builder +2 moreWordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability9.9 Critical
- breakdanceWordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability9.9 Critical
- linux kernelInformation Leakage in kernel6.0 Medium
- linux kernelInformation Leakage in kernel6.0 Medium
- chatikobo internship portal management systemSourceCodester Internship Portal Management System add_admin.php sql injection6.3 Medium
- Show moreLoading…