CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- shopex ecshopSQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via...7.5 High
- seacmsAn issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code...8.8 High
- projeqtorprojeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via...8.8 High
- projeqtorprojeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component ...5.4 Medium
- No product listedCSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute...9.8 Critical
- byzoro smart s210 firmwareFile Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent...6.5 Medium
- inotec gmbh webserverDirectory Traversal vulnerability in INOTEC Sicherheitstechnik GmbH INOTEC Sicherheitstechnik...7.5 High
- advanced-rest-client arc-electronCross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote...4.7 Medium
- itb-pim tradeproSQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries...9.1 Critical
- itb-pim tradeproIncorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order...7.5 High
- itb-pim tradeproIncorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders...7.5 High
- No product listedAn HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05...4.7 Medium
- No product listedA reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310...5.4 Medium
- zoneminderCross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote...8.2 High
- thingsboardThingsBoard AdvancedFeature access control3.8 Low
- oisf suricataSuricata uses excessive resource use in malformed ssh traffic parsing7.5 High
- temporal technologies, inc. serverDenial of Service if invalid UTF-8 sent4.4 Medium
libxsltTuxCare,libxslt-develTuxCare,libxslt-pythonTuxCare +2 moreUpdate of libxsltNo score- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 prior to 9.2.8 and previous versions prior to 8.5.16 are vulnerable to Stored XSS in the Search Field.3.1 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file3.1 Low
- abb symphony plus s+ analyst, symphony plus s+ engineering, symphony plus s+ operations +3 more +5 moreMalformed Packet Handling7.5 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 before 9.2.8 and previous versions before 8.5.16 are vulnerable to Stored XSS in the Custom Class page3.1 Low
amphp/http-clientPackagistamphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames8.2 High- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS versions 9 below 9.2.8 and versions below 8.5.16 are vulnerable to Cross-site Scripting (XSS) in the Advanced File Search Filter3.1 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.2.8 and below 8.5.16 is vulnerable to stored XSS on the calendar color settings screen2.0 Low
- amphp amphp/http, http, amphp/http-client +1 more +3 moreCVE-2024-26538.2 High
- tempesta fwCVE-2024-27586.3 Medium
- debian linux, linux kernel +1 morewifi: mac80211: fix race condition on enabling fast-xmit8.8 High
- debian linux, linux kernel +1 morefbdev: savage: Error out if pixclock equals zero5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morefbdev: sis: Error out if pixclock equals zero5.5 Medium
- debian linux, linux kernel +1 morespi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected5.5 Medium
- linux, linux kernel +1 moreaoe: avoid potential deadlock at set_capacity5.5 Medium
- linux, linux kernel +1 moreext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()7.8 High
- debian linux, linux kernel +1 moredmaengine: ti: edma: Add some null pointer checks to the edma_probe5.5 Medium
- linux, linux kernel +1 moreHID: nvidia-shield: Add missing null pointer checks to LED initialization5.5 Medium
- linux, linux kernel +1 morenvmet-fc: avoid deadlock on delete association path7.5 High
- linux, linux kernel +1 moreLoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC]7.2 High
- linux, linux kernel +1 moredrm/amd/display: fixed integer types and null check locations5.5 Medium
- debian linux, linux kernel +1 moreIB/hfi1: Fix sdma.h tx->num_descs off-by-one error7.8 High
- linux, linux kernel +1 moreLoongArch: Disable IRQ before init_fn() for nonboot CPUs5.5 Medium
- debian linux, linux kernel +1 morefs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio3.3 Low
- debian linux, linux kernel +1 moredm-crypt: don't modify the data when using authenticated encryption7.1 High
- linux, linux kernel +1 morecxl/pci: Skip to handle RAS errors if CXL.mem device is detached7.8 High
- linux, linux kernel +1 morecxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window5.5 Medium
- linux, linux kernel +1 morescsi: target: pscsi: Fix bio_put() for error case9.8 Critical
- linux, linux kernel +1 moremm/swap: fix race when skipping swapcache7.8 High
- linux, linux kernel +1 moremd: Don't ignore suspended array in md_check_recovery()5.5 Medium
- linux, linux kernel +1 moremd: Don't ignore read-only array in md_check_recovery()5.5 Medium
- Show moreLoading…