CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- huawei emui, harmonyos +1 moreVulnerability of starting activities in the background in the ActivityManagerService (AMS) module...7.5 High
- huawei harmonyosThe SystemUI module has a vulnerability in permission management. Impact: Successful exploitation...7.5 High
- kyivstarteam react-native-sms-user-consent, kyivstar react native sms user consent +1 morekyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of defects introduced in the design process in the hwnff module. Impact: Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the window management module. Impact: Successful...7.7 High
- huawei emui, harmonyos +1 moreVulnerability of insufficient permission verification in the app management module. Impact:...7.5 High
- huawei emui, harmonyos +1 morePath traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful...7.5 High
- huawei emui, harmonyos +1 moreUse After Free (UAF) vulnerability in the underlying driver module. Impact: Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the window management module. Impact: Successful...9.1 Critical
- huawei emui, harmonyos +1 moreCommand injection vulnerability in the AccountManager module. Impact: Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the window management module. Impact: Successful...7.5 High
- argie online coursewareSourceCodester Online Courseware saveeditt.php sql injection6.3 Medium
- argie online coursewareSourceCodester Online Courseware editt.php sql injection6.3 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message6.4 Medium
- frroutingIn the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1, there can be a buffer...6.5 Medium
- frroutingIn FRRouting (FRR) through 9.1, there can be a buffer overflow and daemon crash in...6.5 Medium
- frroutingIn FRRouting (FRR) through 9.1, an infinite loop can occur when receiving a MP/GR capability as a...6.5 Medium
- frroutingIn FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP...6.5 Medium
- mojoliciousThe Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be...4.3 Medium
- mojoliciousThe Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that...7.5 High
- nelzkie15 human resource information systemSourceCodester Human Resource Information System addbranches_process.php cross site scripting3.5 Low
- nelzkie15 human resource information systemSourceCodester Human Resource Information System addcorporate_process.php cross site scripting3.5 Low
- human resource information system project resource information system, nelzkie15 human resource information system +1 moreSourceCodester Human Resource Information System login_process.php sql injection7.3 High
- mholt archiver, red hat advanced cluster security 3, advanced cluster security 4 +3 more +5 moreMholt/archiver: path traversal vulnerability6.1 Medium
- iboss secure web gatewayiboss Secure Web Gateway Login Portal login cross site scripting4.3 Medium
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System cross site scripting4.3 Medium
rsa-exportcrates.io`rsa-export` is unmaintainedNo score- apache nimbleApache NimBLE: Denial of service in NimBLE Bluetooth stack7.5 High
- ibm personal communicationsIBM Personal Communications code execution9.0 Critical
- ibm maximo application suiteIBM Maximo Application Suite information disclosure7.5 High
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System config.php redirect7.3 High
- anisha car rentalcode-projects Car Rental add-vehicle.php unrestricted upload6.3 Medium
- xuxueli xxl-jobXuxueli xxl-job Template JdkSerializeTool.java deserialize injection3.5 Low
- janobe online library system, online library system project library system +1 moreSourceCodester Online Library System controller.php cross site scripting3.5 Low
- janobe online library systemSourceCodester Online Library System index.php cross site scripting3.5 Low
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG5.5 Medium
- g5plus ultimate bootstrap elements for elementorUltimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widget6.4 Medium
- janobe online library system, online library system project library system +1 moreSourceCodester Online Library System index.php sql injection7.3 High
- codesupplyco powerkit, powerkit – supercharge your wordpress site +1 morePowerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site S…6.4 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site S…6.4 Medium
- shapedplugin wp carousel, carousel, slider, photo gallery with lightbox, video slider, by wp carousel +1 moreCarousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Contributor+) Stored Cro…6.4 Medium
- janobe online library system, online library system project library system +1 moreSourceCodester Online Library System controller.php sql injection7.3 High
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields6.4 Medium
- janobe online library systemSourceCodester Online Library System deweydecimal.php sql injection7.3 High
- data443 inline related postsInline Related Posts < 3.5.0 - Admin+ Stored XSS4.8 Medium
- janobe online library systemSourceCodester Online Library System index.php sql injection7.3 High
- janobe online library systemSourceCodester Online Library System login.php sql injection7.3 High
- janobe aplaya beach resort online reservation systemSourceCodester Aplaya Beach Resort Online Reservation System index.php cross site scripting3.5 Low
- webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset5.3 Medium
- Show moreLoading…