CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- shapedplugin carousel, slider, photo gallery with lightbox, video slider, by wp carousel, logo carousel, post grid\, post carousel\, \& list category posts +1 more +3 moreCarousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce <= 2.6.3 - Authenticated (Admin+) PHP Object Injec…7.2 High
- princeahmed wp radio – worldwide online radio stations directory for wordpress, wpmilitary wp radio +1 moreWP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Missing Authorization via multiple AJAX actions6.4 Medium
- themepunch essential grid gallery wordpress pluginEssential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure5.3 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags6.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element6.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features6.4 Medium
- princeahmed wp radio – worldwide online radio stations directory for wordpress, wpmilitary wp radio +1 moreWP Radio – Worldwide Online Radio Stations Directory for WordPress <= 3.1.9 - Authenticated(Subscriber+) Stored Cross-Site Scripting via Settings6.4 Medium
- campcodes church management system, church management system project management system +1 moreCampcodes Church Management System admin_user.php sql injection6.3 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element5.4 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting5.4 Medium
- campcodes church management systemCampcodes Church Management System delete_log.php sql injection6.3 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button6.4 Medium
- campcodes church management systemCampcodes Church Management System index.php sql injection7.3 High
- campcodes church management systemCampcodes Church Management System login.php sql injection7.3 High
- campcodes complete online student management system, online student management system +1 moreCampcodes Complete Online Student Management System academic_year_view.php cross site scripting3.5 Low
- campcodes complete online student management system, online student management system, online student management system project student management system +2 moreCampcodes Complete Online Student Management System attendance_view.php cross site scripting3.5 Low
- campcodes complete online student management system, online student management system +1 moreCampcodes Complete Online Student Management System courses_view.php cross site scripting3.5 Low
- hcl software dryice myxalyticsInsecure SQL Interface affects HCL DRYiCE MyXalytics3.7 Low
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8, jboss enterprise application platform 8.0 for rhel 8 +2 more +4 moreEap: oidc app attempting to access the second tenant, the user should be prompted to log7.3 High
- campcodes complete online student management system, online student management system +1 moreCampcodes Complete Online Student Management System Marks_view.php cross site scripting3.5 Low
- campcodes complete online student management system, online student management system, online student management system project student management system +2 moreCampcodes Complete Online Student Management System students_view.php cross site scripting3.5 Low
- campcodes complete online student management system, online student management system +1 moreCampcodes Complete Online Student Management System units_view.php cross site scripting3.5 Low
- campcodes online event management systemCampcodes Online Event Management System index.php cross site scripting3.5 Low
javaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- ping identity pingfederatePingFederate Server Side Request Forgery vulnerability6.5 Medium
- campcodes online event management systemCampcodes Online Event Management System index.php cross site scripting3.5 Low
- wwbn avideoWWBN AVideo Remote Code Execution9.8 Critical
- summernoteSummernote vulnerable to cross-site scripting7.6 High
- inteset secure lockdownAn issue in Secure Lockdown Multi Application Edition v2.00.219 allows attackers to read...6.5 Medium
- inteset secure lockdown, secure lockdown multi application edition +1 moreAn issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows...9.8 Critical
- dronecode px4 drone autopilotAn issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for...6.6 Medium
- portainerPortainer CE allows username enumeration through authentication response timing5.3 Medium
- telesquare tlr-2005ksh firmwareAn issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary...8.8 High
- sipwise next generation communication platformAn issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1 allows a low privileged user to...5.5 Medium
- sipwise next generation communication platformAn Open Redirect vulnerability was found in Sipwise C5 NGCP Dashboard below mr11.5.1. The Open...3.1 Low
- leantimeIn Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the ticket creation and...6.1 Medium
- leantimeLeantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket.4.7 Medium
- leantimeLeantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows...8.8 High
- enpass password manager, desktop application +1 moreHTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and...8.8 High
- savignano s-notifyCross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the...6.1 Medium
- savignano s-notifyCross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages...5.2 Medium
- No product listedTime4J Base v5.9.3 was discovered to contain a NullPointerException via the component net.time4j...5.3 Medium
- joda timeJoda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda...9.1 Critical
- jfree jfreechartJFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the component ...7.5 High
- jfree jfreechartFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels...7.5 High
- jfree jfreechartJFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the ...8.4 High
- irontec sngrepStack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep9.0 Critical
- irontec sngrepStack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep9.0 Critical
- campcodes online event management systemCampcodes Online Event Management System process.php cross site scripting3.5 Low
- Show moreLoading…