CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- khl32 font farsiFont Farsi <= 1.6.6 - Admin+ Stored XSS in Settings6.1 Medium
- pressified sendpress, unknown sendpress newsletters +1 moreSendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Form Settings6.1 Medium
- pressified sendpress, unknown sendpress newsletters +1 moreSendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via Settings6.8 Medium
- wpb show core project show core, unknown wpb-show-core +1 moreWPB Show Core < 2.6 - Reflected XSS4.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn faceid service, there is a possible out of bounds read due to a missing bounds check. This...4.4 Medium
- google android, unisoc andriod12, andriod13 +1 more +3 moreIn vsp driver, there is a possible missing verification incorrect input. This could lead to local...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. t760/t770/t820/s8000 +1 moreIn ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead...5.9 Medium
- google android, unisoc s8000, t760 +3 more +5 moreIn modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling....5.3 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn camera driver, there is a possible use after free due to a logic error. This could lead to...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn Network Adapter Service, there is a possible missing permission check. This could lead to...5.5 Medium
- google android, unisoc s8000, sc7731e +12 more +14 moreIn ril service, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn ril service, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn ril service, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn ril service, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn ril service, there is a possible out of bounds write due to a missing bounds check. This could...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn modem driver, there is a possible system crash due to improper input validation. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn modem driver, there is a possible system crash due to improper input validation. This could...6.0 Medium
- google android, unisoc (shanghai) technologies co., ltd. t760/t770/t820/s8000 +1 moreIn modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling....5.3 Medium
- google android, unisoc (shanghai) technologies co., ltd. t760/t770/t820/s8000 +1 moreIn SecurityCommand message after as security has been actived., there is a possible improper...5.5 Medium
- google android, unisoc s8000 firmware, t760 firmware +3 more +5 moreIn modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling....7.5 High
- google android, unisoc s8000, t760 +3 more +5 moreIn Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible...7.5 High
- furuno systems co.,ltd. acera 9010-08, acera 9010-24, furunosystems acera 9010-08 firmware +1 more +3 moreThe password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier,...8.8 High
ndpiOSS-FuzzUNKNOWN READ in ndpi_detection_process_packetNo scorejackson-databindOSS-FuzzSecurity exception in com.github.javaparser.ast.validator.TreeVisitorValidator.acceptNo score- fast5 prison management systemSourceCodester Prison Management System Avatar add-admin.php unrestricted upload6.9 Medium
- totolink ex200, ex200 firmware +1 moreIn TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without...7.5 High
- totolink ex200 firmwareIn TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without...7.5 High
- totolink ex200 firmwareIn TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without...9.1 Critical
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login...8.8 High
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default.8.4 High
- totolink ex200 firmwareIn TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without...6.5 Medium
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE)...8.0 High
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE)...8.8 High
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE)...8.8 High
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE)...9.8 Critical
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS)...6.5 Medium
- totolink ex200 firmwareTOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to start the Telnet service without...6.5 Medium
- openexrAn issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to...3.3 Low
- candycmsAn issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary...9.8 Critical
- facuet ryuRyu Infinite Loop vulnerability7.5 High
- enilu web-flashAn issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via...8.1 High
- ollamaOllama DNS rebinding vulnerability6.6 Medium
- atos openscape desk phone ip 35g eco firmware, openscape desk phone ip 35g firmware, mitel 6905 firmware +13 more +15 moreIn Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).8.8 High
- gnu savaneAn issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the...8.8 High
- gnu savaneCross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker...6.0 Medium
- gnu savaneInsecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker...7.5 High
- zlmediakitIncorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote...9.8 Critical
- wondershare filmoraInsecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to...7.8 High
- secdiskappAn issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower fu…8.8 High
- mikkotommila apfloatApfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal...9.8 Critical
- Show moreLoading…