CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- boldgrid easy seo – simple and effective seo, easy seo +1 moreBoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information Exposure5.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressIcegram Express <= 5.7.14 - Authenticated (Administrator+) Cross-Site Scripting via CSV import4.4 Medium
- andypotanin wp-stateless – google cloud storage, udx wp-stateless +1 moreWP-Stateless – Google Cloud Storage <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update7.1 High
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripti…6.4 Medium
- dfactory image watermarkImage Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification4.3 Medium
matioOSS-FuzzUse-of-uninitialized-value in H5G__ent_to_linkNo score- engindemirbilek northstarc2Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to...8.8 High
- everywall ladderAn issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information...7.5 High
- aplaya beach resort online reservation system project beach resort online reservation system, janobe aplaya beach resort online reservation system +1 moreSourceCodester Aplaya Beach Resort Online Reservation System index.php cross site scripting3.5 Low
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System sql injection7.3 High
- lenovo printers, lingxlang g262dn firmware, lingxlang g336dn firmware +4 more +6 moreA denial of service vulnerability was reported in some Lenovo Printers that could allow an...7.5 High
- lenovo printers, lingxlang g262dn firmware, lingxlang g336dn firmware +4 more +6 moreA vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker...7.5 High
- lenovo printers, lijiang g263dns firmware, lijiang g266dns firmware +27 more +29 moreA vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker...5.3 Medium
- lenovo printersA denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that...4.9 Medium
- lenovo printersA buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that...4.9 Medium
- lenovo fingerprint reader, synaptics fingerprint readers +1 moreAn authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint...6.3 Medium
- lenovo desktop bios, smart edge bios, thinkstation biosA potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and...6.7 Medium
- lenovo biosA potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart...6.7 Medium
- lenovo notebook, notebook bios +1 moreA potential memory leakage vulnerability was reported in some Lenovo Notebook products that may...6.7 Medium
- lenovo xclarity administratorA valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an...6.5 Medium
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System sql injection7.3 High
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection7.3 High
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection7.3 High
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection7.3 High
- nvidia nemoNVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab…8.6 High
- google nest wifi pro, nest wifi point firmware, nest wifi pro firmware +1 more +3 moreUnchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read10.0 Critical
- aplaya beach resort online reservation system project beach resort online reservation system, janobe aplaya beach resort online reservation system +1 moreSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection7.3 High
- nvidia nvtiff libraryNVIDIA nvTIFF Library for Windows and Linux contains a vulnerability where improper input...2.8 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where...3.3 Low
- nvidia nvjpeg2000 libraryNVIDIA nvJPEG2000 Library for Windows and Linux contains a vulnerability where improper input...2.8 Low
- cdata syncA path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running...8.6 High
- cdata arcA path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running...8.6 High
- cdata connectA path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when...9.8 Critical
- cdata api serverA path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when...9.8 Critical
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection7.3 High
github.com/cosmos/ibc-goGo,github.com/cosmos/ibc-go/v2Go,github.com/cosmos/ibc-go/v3Go +5 more +7 moreibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks9.1 Critical- psi-4ward psitransferPsiTransfer file integrity violation vulnerability6.5 Medium
- psi-4ward psitransferPsiTransfer vulnerable to violation of the integrity of file distribution6.5 Medium
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System login.php sql injection7.3 High
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection7.3 High
- sanchitkmr airline ticket reservation systemSourceCodester Airline Ticket Reservation System activate_jet_details_form_handler.php sql injection7.3 High
- byzoro smart s80Byzoro Smart S80 webmailattach.php os command injection6.3 Medium
- google chromecast, chromecast firmware +1 moreChromecast Bootloader & Kernel-level code-execution including compromise of user-data10.0 Critical
- lizardbyte sunshineSunshine vulnerable to remote unauthenticated arbitrary file read7.3 High
- webhood-io webhoodMissing Authentication for Critical Function in Webhood backend9.8 Critical
- instantcms, instantsoft icms2 +1 moreInstantCMS Open Redirect vulnerability3.5 Low
- checkmkXSS in graph rendering4.6 Medium
- squelch tabs and accordions shortcodesSquelch Tabs and Accordions Shortcodes <= 0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via accordions Shortcode6.4 Medium
- wordpress foundation wordpressWordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink5.3 Medium
- Show moreLoading…