CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices...7.6 High
- siemens scalance w1748-1 m12, scalance w1788-1 m12, scalance w1788-2 eec m12 +38 more +40 moreA vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748...8.4 High
- siemens scalance w1748-1 m12, scalance w1788-1 m12, scalance w1788-2 eec m12 +33 more +35 moreA vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748...6.1 Medium
- siemens scalance w721-1 rj45, scalance w722-1 rj45, scalance w734-1 rj45 +20 more +22 moreA vulnerability has been identified in SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) (All versions),...6.1 Medium
- siemens jt2go, parasolid v35.1, parasolid v36.0 +4 more +6 moreA vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36...4.8 Medium
- siemens jt2go, parasolid, parasolid v35.1 +6 more +8 moreA vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36...4.8 Medium
- siemens jt2go, parasolid, parasolid v35.1 +6 more +8 moreA vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36...7.3 High
- siemens simatic pcs 7 v9.1, simatic wincc runtime professional v17, simatic wincc runtime professional v18 +3 more +5 moreA vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC...6.9 Medium
- pencidesign soledadWordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- welotec tk515l, tk515l set, tk515l-w +11 more +13 moreWelotec: improper access control in TK500v1 router series9.8 Critical
- welotec tk515l, tk515l set, tk515l-w +11 more +13 moreWelotec: Command injection vulnerability in TK500v1 router series8.8 High
- pencidesign soledadWordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability6.5 Medium
- pencidesign soledadWordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability7.1 High
- themify post type builder (ptb)WordPress Post Type Builder (PTB) plugin <= 2.0.8 - Auth. Arbitrary Post/Page Creation vulnerability7.1 High
- themify post type builder (ptb)WordPress Post Type Builder (PTB) plugin < 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- red hat jboss enterprise application platform, jboss enterprise application platform 7.1 eus for rhel 7, jboss enterprise application platform 7.3 eus for rhel 7 +7 more +9 moreEap: wildfly-elytron has a ssrf security issue7.3 High
- bdwm responsive gallery gridResponsive Gallery Grid < 2.3.11 - Admin+ Stored XSS6.1 Medium
- sap se netweaver as abap and abap platformDenial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP Platform6.5 Medium
- sap se s/4 hana (cash management)Missing Authorization check in SAP S/4 HANA (Cash Management)4.3 Medium
- octopus serverA race condition was identified through which privilege escalation was possible in certain...8.8 High
- sap se s/4 hana (cash management)Missing Authorization check in SAP S/4 HANA (Cash Management)4.3 Medium
- sap se business connectorCross-Site Scripting (XSS) vulnerability in SAP Business Connector4.8 Medium
- sap se business connectorCross-Site Scripting (XSS) vulnerability in SAP Business Connector4.8 Medium
- sap se group reporting data collection (enter package data), group reporting data collection +1 moreMissing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)6.5 Medium
- sap asset accountingDirectory Traversal vulnerability in SAP Asset Accounting7.2 High
- sap se netweaver as java user management engineSecurity misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine8.8 High
- sap netweaverServer-Side Request Forgery in SAP NetWeaver5.3 Medium
- sap businessobjects web intelligenceInformation Disclosure vulnerability in SAP BusinessObjects Web Intelligence7.7 High
- oretnom23 computer laboratory management systemA stored cross-site scripting (XSS) vulnerability in Computer Laboratory Management System v1.0...5.4 Medium
- online graduate tracer system project graduate tracer system, tamparongj03 online graduate tracer system +1 moreSourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request...8.6 High
- online graduate tracer system project graduate tracer system, tamparongj03 online graduate tracer system +1 moreSourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id"...7.5 High
- No product listedUnifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting (XSS) via file upload feature...5.4 Medium
- canimaan clamxavAn issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a...7.8 High
- xenCVE-2024-22014.7 Medium
- hcl software bigfix enterprise suite asset discoveryHCL BigFix Asset Discovery is affected by a security vulnerability6.6 Medium
- nvidia chatrtxCVE6.5 Medium
- nvidia chatrtxCVE8.2 High
- laundry management system project management system, sourcecodester laundry management system, oretnom23 laundry shop management system +2 moreSourceCodester Laundry Management System Pengeluaran.php laporan_filter sql injection5.5 Medium
- sourcecodester laundry management system, oretnom23 laundry shop management system +1 moreSourceCodester Laundry Management System Transaki.php laporan_filter sql injection6.3 Medium
- sourcecodester laundry management system, oretnom23 laundry shop management system +1 moreSourceCodester Laundry Management System Pelanggan.php laporan_filter sql injection6.3 Medium
- laundry management system project management system, sourcecodester laundry management system, oretnom23 laundry shop management system +2 moreSourceCodester Laundry Management System edit cross site scripting3.5 Low
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway add_ikev2.php sql injection6.3 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection6.3 Medium
- inpsyde backwpupBackWPup < 4.0.4 - Unauthenticated Backup Download7.5 High
- netentsec application security gateway, ns-asg, ns-asg application security gateway +2 moreNetentsec NS-ASG Application Security Gateway config_Anticrack.php sql injection6.3 Medium
- shopwareShopware has Improper Session Handling in store-api5.3 Medium
- redon-tech redon-hub, redon roblox purchasing hub +1 moreRedon-Hub has incorrect permissions on all admin related commands8.8 High
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway add_postlogin.php sql injection6.3 Medium
- laundry management system project management system, sourcecodester laundry management system, oretnom23 laundry shop management system +2 moreSourceCodester Laundry Management System laporan_filter sql injection6.3 Medium
- binary-husky gpt academicGPT Academic: Pickle deserializing cookies may pose RCE risk9.8 Critical
- Show moreLoading…