CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- tribulant slideshow galleryWordPress Slideshow Gallery LITE plugin <= 1.7.8 - Sensitive Data Exposure vulnerability5.3 Medium
- wp oauth server oauth server, wp-oauth wp oauth server +1 moreWordPress WP OAuth Server (OAuth Authentication) plugin <= 4.3.3 - Open Redirection vulnerability4.7 Medium
- app cheap builder, appcheap app builder +1 moreWordPress App Builder plugin <= 3.8.7 - Open Redirection vulnerability4.7 Medium
- go programming language golang, haskell process library, haskell programming language haskel +6 more +8 moreCommand injection vulnerability in programing languages on Microsoft Windows operating system.9.8 Critical
- traccarTraccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type8.5 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: net: assertion failure in update_sctp_checksum()5.5 Medium
- mauticImproper Access Control Leads to Server-Side Request Forgery in Mautic5.0 Medium
- acquia mauticImproper Access Control Issues Lead to Sensitive Data Exposure in Mautic5.4 Medium
- mauticPredictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86, relocs: Ignore relocations in .notes section5.5 Medium
- fortinet forticlient, forticlientmac +1 moreAn external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3...7.8 High
- adobe media encoderAdobe Media Encoder 2024 AI file parsing Stack based buffer overflow7.8 High
- exactly www ewww image optimizerWordPress EWWW Image Optimizer plugin <= 7.2.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- adobe indesign, indesign desktop +1 moreAdobe Indesign 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerabiity5.5 Medium
- adobe photoshop, photoshop desktop +1 moreAdobe Photoshop 2024 TIF File parsing Out-Of-Bound Read5.5 Medium
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attack7.5 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Input Validation (CWE-20)9.0 Critical
- adobe commerce, magento +1 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.1 High
- linux, linux kernel +1 morenet/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check7.8 High
- linux ofono, fedoraproject fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function8.1 High
- csutils csmockCsmock: command injection vulnerability in csmock-plugin-snyk7.6 High
- adobe after effectsAdobe After Effect 2024 RGB File parsing Memory Corruption Vulnerability5.5 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- setriosoft bizcalendar webBizCalendar Web <= 1.1.0.25 - Reflected Cross-Site Scripting via 'tab'6.1 Medium
- dell alienware 14 r2, alienware 15 r6, alienware 16 r1 +325 more +327 moreDell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user...4.7 Medium
- dell alienware command center, alienware command center (awcc) +1 moreDell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path...7.4 High
- dell alienware command center, alienware command center (awcc) +1 moreDell Alienware Command Center, versions 5.5.52.0 and prior, contain improper access control...6.7 Medium
- campcodes church management systemCampcodes Church Management System add_visitor.php cross site scripting3.5 Low
- properfraction paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress, profilepress +1 morePaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'reg-sing…6.4 Medium
- livemesh addons by elementor, livemeshelementor addons for elementor +1 moreElementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name6.4 Medium
- livemesh addons by elementor, livemeshelementor addons for elementor +1 moreElementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute6.4 Medium
- campcodes church management system, church management system project management system +1 moreCampcodes Church Management System admin_user.php cross site scripting3.5 Low
- campcodes church management systemCampcodes Church Management System add_sundaysch.php sql injection6.3 Medium
- campcodes church management systemCampcodes Church Management System addgiving.php sql injection6.3 Medium
- unknown the ultimate video player for wordpress, prestoplayer presto player +1 moreThe Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS4.7 Medium
- unknown wordpress ping optimizer, wordpress ping optimizer project ping optimizer +1 moreWordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF4.3 Medium
- mysqljs mysql2mysql2 cache poisoning vulnerability6.5 Medium
- mysqljs mysql2mysql2 vulnerable to Prototype Poisoning6.5 Medium
- campcodes church management systemCampcodes Church Management System addTithes.php sql injection6.3 Medium
- Show moreLoading…