CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP response splitting7.3 High
- jcwasmx86 mesonlspDirectory traversal allowing overwriting arbitrary files5.8 Medium
- nt1m livemarksGitHub Security Lab (GHSL) Vulnerability Report, livemarks: `GHSL-2024-015`2.6 Low
- cloudburstmc networkCloudburst Network DoS in RakNet connection handling8.6 High
- alexxit go2rtcGHSL-2023-207 gotortc DOM-based Cross-site Scripting vulnerability6.1 Medium
- ericsson network managerEricsson Network Manager - Improper Neutralization of Formula Elements Vulnerability7.1 High
- alexxit go2rtcGHSL-2023-206 gotortc Cross-Site Request Forgery vulnerability8.8 High
- esri arcgis enterprise, portal for arcgis +1 morePortal for ArcGIS has an invalid authentication vulnerability8.5 High
- esri portal for arcgisCross site scripting issue in embed widget5.4 Medium
- esri portal for arcgisHTMLi at createFolder Content Injection6.1 Medium
- hashicorp vault, vault enterprise +1 moreVault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses6.4 Medium
- esri portal for arcgisSelf-XSS style in move item dialog6.1 Medium
- esri arcgis enterprise builderPersistent XSS in URL added to a shared map4.8 Medium
- esri portal for arcgis, liferay portal +1 moreReflected XSS in Portal for ArcGIS6.1 Medium
- esri portal for arcgisPortal for ArcGIS has a directory traversal vulnerability.9.9 Critical
- esri portal for arcgis, liferay portal +1 moreconcatenated errors resulting in cross site scripting and frame injection issues.7.2 High
- arcgis portal, esri portal for arcgis +1 moreStored XSS in Portal for ArcGIS4.8 Medium
- esri portal for arcgis, liferay portal +1 moreStored XSS in Portal for ArcGIS5.4 Medium
- esri portal for arcgis, arcgis enterprise web app builder +1 moreHTML injection in ArcGIS Web AppBuilder4.7 Medium
- esri arcgis enterprise web app builder, arcgis enterprise +1 morePersistent XSS when creating new application using Web App Builder4.8 Medium
- nodejs node, node.js +1 moreThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 Medium
- esri portal for arcgisBUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS5.4 Medium
- ibm application gateway, security verify access, security verify access appliance +1 more +3 moreIBM Security Verify Access information disclosure8.7 High
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty denial of service5.9 Medium
- brocade fabric os, broadcom brocade fabric operating system, fabric operating system +2 moreRemote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could...8.6 High
- xwikisas macro-pdfviewer, macro pdfviewer +1 moreThe PDF Viewer macro can be used to view PDF attachments with restricted access7.7 High
- schweitzer engineering laboratories sel-700bt motor bus transfer relay, sel-700g generator protection relay, sel-751 feeder protection relay +3 more +5 moreInclusion of Undocumented Features6.5 Medium
- 3ds edrawingsOut-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SO…7.8 High
- 3ds edrawingsOut-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 20247.8 High
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreRemote Code Execution Vulnerability through the validate binary path API in pgAdmin 47.4 High
- alexxit go2rtcGHSL-2023-205 gotortc DOM-based Cross-site Scripting vulnerability6.1 Medium
- collaboraoffice collabora online, collaboraonline online +1 moreCollabora Online Stored Cross-Site-Scripting vulnerability via tooltip6.1 Medium
- oisf libhtpExcessive CPU used on malformed traffic7.5 High
- opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 moreMobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check6.3 Medium
- envoyproxy envoyHTTP/2: memory exhaustion due to CONTINUATION frame flood7.5 High
- canonical pebblePebble service manager's file pull API allows access by any user6.5 Medium
- jstnmcbrd dectalk-ttsUse of Unencrypted HTTP Request in dectalk-tts8.2 High
- nodejs undici, fedoraproject fedora +1 moreUndici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect2.6 Low
- nodejs undici, fedoraproject fedora +1 moreUndici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline3.9 Low
- red hat enterprise linux 8, enterprise linux 9 +1 moreRust-openssl: timing based side-channel can lead to a bleichenbacher style attack5.9 Medium
- red hat hawtio 4.0.0 for red hat build of apache camel 4, amq streams 2.7.0, build of apache camel 4 for quarkus 3 +9 more +11 moreQuarkus-core: leak of local configuration properties into quarkus applications7.0 High
- alsendo sp. z o. o. apaczkaImproper access control in Apaczka plugin for PrestaShop7.5 High
- debian linux, linux kernel +1 morenetfilter: nft_set_pipapo: release elements in clone only from destroy path7.8 High
- debian linux, linux kernel +1 morenetfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain7.8 High
- best practical solutions request trackerInformation exposure vulnerability in Request Tracker (RT)5.5 Medium
- wolfssl wolfcrypt, wolfssl +1 moreFault Injection of RSA encryption in WolfCrypt5.9 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- linux, linux kernel +1 morespi: cadence-qspi: fix pointer reference in runtime PM hooks7.8 High
- linux, linux kernel +1 morespi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenetlink: Fix kernel-infoleak-after-free in __skb_datagram_iter5.5 Medium
- Show moreLoading…