CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- mindersec minderMinder GetRepositoryByName data leak4.3 Medium
- apache zeppelinApache Zeppelin: LDAP search filter query Injection Vulnerability6.5 Medium
- contaoContao's remember-me tokens will not be cleared after a password change5.9 Medium
- apache zeppelinApache Zeppelin: XSS vulnerability in the helium module6.1 Medium
- apache zeppelinApache Zeppelin: Interpreter download command does not escape malicious code injection9.8 Critical
- apache zeppelinApache Zeppelin: Cron arbitrary user impersonation with improper privileges6.5 Medium
- apache zeppelinApache Zeppelin: Remote code execution by adding malicious JDBC connection string9.8 Critical
- diracgrid diracDIRAC: Unauthorized users can read proxy contents during generation8.1 High
- contaoContao possible cookie sharing with external domains while checking protected pages for broken links8.4 High
- hp poly ccx 350, poly ccx 400, poly ccx 500 +4 more +6 moreA vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in...8.8 High
- fortinet fortisandboxA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortisandboxA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortiosA use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and...6.1 Medium
- fortinet fortimanagerA improper neutralization of special elements used in a template engine [CWE-1336] in...6.3 Medium
- fortinet fortisandboxAn improper neutralization of special elements used in an os command ('os command injection') in...6.5 Medium
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...5.8 Medium
- fortinet fortios, fortiproxy +1 moreA insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0...7.5 High
- fortinet fortisandboxA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...7.9 High
- fortinet fortisandboxAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...6.5 Medium
- fortinet forticlient, forticlientlinux +1 moreAn improper control of generation of code ('code injection') in Fortinet FortiClientLinux version...9.4 Critical
- fortinet fortiosAn exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least...5.0 Medium
cpioTuxCareUpdate of cpioNo score- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link...8.1 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), eap225 firmware +1 moreA denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU...7.4 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link...8.1 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap225 firmware +2 moreA memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350...7.5 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap225 firmware +2 more +4 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap225 firmware +2 more +4 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap115 firmware +3 more +5 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- tp-link ac1350 wireless mu-mimo gigabit access point (eap225 v3), ac1350 firmware, eap225 firmware +2 more +4 moreA stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling...7.2 High
- contaoContao has insufficient BBCode sanitizer4.3 Medium
- contaoContao may have unencoded insert tags in the frontend3.1 Low
- contaoContao core bundle vulnerable to cross site scripting in the file manager5.4 Medium
- lg webosCommand injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint9.1 Critical
- lg webosCommand injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service9.1 Critical
- lg webosCommand injection in the processAnalyticsReport method from the com.webos.service.cloudupload service9.1 Critical
- lg webosPIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction7.2 High
- bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 morePrivilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)8.1 High
- bitdefender endpoint security for linux, endpoint security, gravityzone +3 more +5 moreIncorrect Regular Expression in GravityZone Update Server (VA-11465)8.1 High
- apache zeppelinApache Zeppelin: Replacing other users notebook, bypassing any permissions5.3 Medium
- eclipse kuraEclipse Kura LogServlet vulnerability7.5 High
- apache zeppelinApache Zeppelin: Denial of service with invalid notebook name5.3 Medium
- apache zeppelin, apache software foundation zeppelin sap +1 moreApache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE5.3 Medium
- apache zeppelinApache Zeppelin: CSRF vulnerability in the Credentials page5.4 Medium
- apache zeppelinApache Zeppelin: Path traversal vulnerability6.5 Medium
- codeisawesome aikitWordPress CodeisAwesome AIKit plugin <= 4.14.1 - SQL Injection vulnerability8.5 High
- Show moreLoading…