CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
libp2p-tokio-socks5crates.io`libp2p-tokio-socks5` is unmaintainedNo score- extremepacs extreme xdsIDOR in ExtremePacs's Extreme XDS8.8 High
- extremepacs extreme xdsInformation Disclosure in ExtremePacs's Extreme XDS7.2 High
- mattermost, mattermost server +1 moreMattermost fails to authenticate the source of certain types of post actions6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevfio/pci: Disable auto-enable of exclusive INTx IRQ5.5 Medium
- debian linux, linux kernel +1 morevfio/fsl-mc: Block calling interrupt handler without trigger5.5 Medium
- linux, linux kernel +1 morevfio/platform: Create persistent IRQ handlers5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevfio/pci: Create persistent INTx handler7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevfio/pci: Lock external INTx masking ops7.8 High
- mattermost, mattermost server +1 moreInvite ID available to team admins even without the "Add Members" permission4.7 Medium
- mattermost, mattermost server +1 moreDoS via a large number of User Preferences4.3 Medium
- mattermost, mattermost server +1 moreUsers maintain access to active call after being removed from a channel3.1 Low
- listingthemes wp directory kitWP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection8.8 High
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation8.8 High
- kadence wp gutenberg blocks by kadence blocks, kadencewp gutenberg blocks with ai, wpdownloadmanager gutenberg blocks for wordpress download manager +2 moreGutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSS6.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreTruncated port name4.3 Medium
- elearning system project system, oretnom23 elearning system +1 moreSourceCodester eLearning System Maintenance Module cross site scripting3.5 Low
- oretnom23 elearning systemSourceCodester eLearning System cross site scripting3.5 Low
clangAzure Linux,llvmAzure Linux,clang16Azure Linux +24 more +26 moreLLVM before 18.1.3 generates code in which the LR register can be overwritten without data being...5.9 Medium- secnet security network intelligent ac management system security network intelligent ac management systemAn issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local...7.8 High
- tenda ac18 firmwareA command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which...8.8 High
- donbermoy complete e-commerce site, sourcecodester complete ecommerce site +1 moreArbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows...9.8 Critical
- qlik qlikviewA race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70...7.8 High
- zly2006 redenDirectory Traversal vulnerability in zly2006 Reden before v.0.2.514 allows a remote attacker to...8.8 High
- No product listedIn Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information...5.9 Medium
- maildevMailDev Remote Code Execution9.1 Critical
- chilkatsoft chilkatChilkat before v9.5.0.98, allows attackers to obtain sensitive information via predictable PRNG...6.2 Medium
- gnu grub2, debian based gnu grub, netapp bootstrap os +2 moreGRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2...6.7 Medium
- sheetjs community editionSheetJS Regular Expression Denial of Service (ReDoS)7.5 High
- spacex starlink wi fi router gen 2 starlink wi fi router gen 2SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722...8.8 High
- spacex starlink wifi router gen2SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password...6.8 Medium
- instantcms, instantcms icms2 +1 moreSQL injection in index_chart_data action6.7 Medium
- wordpress, wordpress wordpress-develop +1 moreRemote Code Execution in `WP_HTML_Token`5.5 Medium
- wordpress, wordpress wordpress-develop +1 morePHP file upload bypass via Plugin installer7.7 High
- ubiquiti unifi network applicationA Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi...9.8 Critical
- ivanti connect secure, policy secure +1 moreA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti...8.2 High
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Webview2 Spoofing Vulnerability4.1 Medium
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- computer laboratory management system project laboratory management system, oretnom23 computer laboratory management system +1 moreSourceCodester Computer Laboratory Management System view_category.php sql injection6.3 Medium
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System user.php sql injection6.3 Medium
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System Users.php sql injection6.3 Medium
- mailcow dockerized, mailcow-dockerized, mailcow\ +2 moremailcow Cross-site Scripting Vulnerability via Exception Handler6.1 Medium
- dreamer cms, iteachyou dreamer cms +1 moreDreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal6.3 Medium
- mailcow mailcow-dockerized, mailcow\ +1 moremailcow Path Traversal and Arbitrary Code Execution Vulnerability6.2 Medium
- baptistearno typebot.io, typebot +1 moretypebot.io: `GHSL-2024-040`8.1 High
- ivanti connect secure, policy secure +1 moreA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti...8.2 High
- ivanti connect secure, policy secure +1 moreA null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x)...7.5 High
- ivanti connect secure, policy secure +1 moreAn XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22...5.3 Medium
- envoyproxy envoyHTTP/2: CPU exhaustion due to CONTINUATION frame flood5.3 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modules6.3 Medium
- Show moreLoading…