CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- lizardbyte sunshineClients removed during unpairing process may regain access if Sunshine was not restarted5.9 Medium
- wangshen secgate 3600Wangshen SecGate 3600 ?g=net_pro_keyword_import_save unrestricted upload4.7 Medium
- fast5 prison management systemSourceCodester Prison Management System apply_leave.php cross site scripting3.5 Low
- fast5 prison management systemSourceCodester Prison Management System delete_leave.php sql injection6.3 Medium
- saleorSaleor CSRF bypass in refreshToken mutation4.2 Medium
- dataeaseDataEase has database configuration information exposure vulnerability5.3 Medium
- fast5 prison management system, prison management system project management system +1 moreSourceCodester Prison Management System edit-profile.php sql injection6.3 Medium
- fast5 prison management systemSourceCodester Prison Management System edit_profile.php sql injection4.7 Medium
- openssl, debian linux, netapp 500f firmware +79 more +81 moreUnbounded memory growth with session handling in TLSv1.35.9 Medium
- namithjawahar wp-insertnamithjawahar Wp-Insert cross site scripting3.5 Low
- gamerz wp-postratingsGamerZ WP-PostRatings wp-postratings.php cross site scripting3.5 Low
- microfocus arcsight management center, opentext arcsight platform +1 moreOpenText ArcSight Management Center and ArcSight Platform Stored XSS8.7 High
- red hat openshift container platform 4, openshift container platform 4.12 +1 moreKube-controller-manager: malformed hpa v1 manifest causes crash7.7 High
- fast5 prison management system, prison management system project management system +1 moreSourceCodester Prison Management System login.php sql injection7.3 High
kubevirtopenSUSESecurity update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t…No scorecontainerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- fast5 prison management systemSourceCodester Prison Management System login.php sql injection7.3 High
- linux, linux kernel +1 moreksmbd: validate payload size in ipc response9.8 Critical
- huawei emui, harmonyos +1 moreInput verification vulnerability in the call module. Impact: Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreInput verification vulnerability in the log module. Impact: Successful exploitation of this...7.5 High
- huawei harmonyosVulnerability of permission control in the window module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of input parameters being not strictly verified in the RSMC module. Impact:...6.3 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this...6.2 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this...6.5 Medium
- huawei emui, harmonyos +1 moreRace condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this...7.4 High
- saleswonder team tobias wp2leadsWordPress WP2LEADS plugin <= 3.2.7 - Broken Access Control vulnerability5.4 Medium
- huawei emui, harmonyos +1 moreInput verification vulnerability in the power module. Impact: Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of data verification errors in the kernel module. Impact: Successful exploitation...5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of data verification errors in the kernel module. Impact: Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of data verification errors in the kernel module. Impact: Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of package name verification being bypassed in the Calendar app. Impact: Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of file path verification being bypassed in the email module. Impact: Successful...4.3 Medium
- bdthemes ultimate store kit elementor addonsWordPress Ultimate Store Kit Elementor Addons plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- huawei emui, harmonyos +1 moreVulnerability of permission verification in some APIs in the ActivityTaskManagerService module....7.5 High
- huawei emui, harmonyos +1 morePermission verification vulnerability in the system module. Impact: Successful exploitation of...6.2 Medium
- huawei emui, harmonyos +1 morePermission verification vulnerability in the system module. Impact: Successful exploitation of...6.5 Medium
- huawei emui, harmonyos +1 moreAuthentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 morePermission verification vulnerability in the Settings module. Impact: Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of package name verification being bypassed in the HwIms module. Impact: Successful...9.1 Critical
- huawei emui, harmonyos +1 moreVulnerability of package name verification being bypassed in the HwIms module. Impact: Successful...7.5 High
- huawei emui, harmonyos +1 morePermission control vulnerability in the clock module. Impact: Successful exploitation of this...7.5 High
- open-xchange gmbh ox app suiteRSS feeds that contain malicious data- attributes could be abused to inject script code to a...6.1 Medium
- open-xchange gmbh ox app suiteUpsell advertisement information of an account can be manipulated to execute script code in the...5.4 Medium
- open-xchange gmbh ox app suiteUpsell shop information of an account can be manipulated to execute script code in the context of...5.4 Medium
- open-xchange gmbh ox app suiteEmbedded content references at tasks could be used to temporarily execute script code in the...5.4 Medium
- wpb show core project show core, unknown wpb-show-core +1 moreWPB Show Core < 2.7 - Reflected XSS4.8 Medium
- unknown wpb-show-core, wpb show core project show core +1 moreWPB Show Core < 2.7 - Reflected XSS6.1 Medium
- Show moreLoading…