CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- mayurik advocate office management system, sourcecodester kortex lite advocate office management system +1 moreSourceCodester Kortex Lite Advocate Office Management System deactivate_case.php sql injection4.7 Medium
- conveythis language translate widget for word press conveythis, translate wordpress websites globally with conveythis translate +1 moreLanguage Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key7.2 High
- libreswanIKEv1 default AH/ESP responder can cause libreswan to abort and restart6.5 Medium
- oretnom23 warehouse management systemSourceCodester Warehouse Management System pengguna.php cross site scripting3.5 Low
- oretnom23 warehouse management systemSourceCodester Warehouse Management System customer.php cross site scripting3.5 Low
- oretnom23 warehouse management system, warehouse management system project management system +1 moreSourceCodester Warehouse Management System supplier.php cross site scripting3.5 Low
- loan management system project management system, razormist loan management system +1 moreSourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password"...9.8 Critical
- eprosima fast ddsAn issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause...5.5 Medium
- eprosima fast ddsAn issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause...7.1 High
- objectcomputing openddsAn issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a...4.3 Medium
- hadskyReflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to...6.1 Medium
- codersclub discuz\!ml, discuz discuzx +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows...7.1 High
- rageframeReflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers...4.7 Medium
- rageframeReflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers...5.4 Medium
- rageframeReflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers...6.1 Medium
- rageframe, rangeframe 2 2 +1 moreA cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to...6.1 Medium
- gnu savaneAn issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute...7.6 High
- swftoolsNull Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the...7.5 High
- corezoidOpen Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to...4.3 Medium
- linksys re7000 firmwareLinksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the ...8.8 High
- thesycon tusbaudio, kg tusbaudio msi based installers +1 moreAn issue discovered in Thesycon Software Solutions Gmbh & Co. KG TUSBAudio MSI-based installers...7.8 High
- formtools form toolsServer Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run...7.2 High
- formtools form toolsCross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to...6.3 Medium
- formtools form toolsSQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands...8.1 High
- formtools form toolsCross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary...9.6 Critical
- formtools form toolsCross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary...6.1 Medium
- reporticoReportico affected by Incorrect Access Control6.5 Medium
- dnspython, eventlet, fedoraproject fedora +1 more +3 morePotential DoS via the Tudoor mechanism in eventlet and dnspython7.0 High
- oretnom23 warehouse management systemSourceCodester Warehouse Management System barang.php cross site scripting3.5 Low
- sigstore cosignCosign vulnerable to machine-wide denial of service via malicious artifacts4.2 Medium
- sigstore cosignCosign vulnerable to system-wide denial of service via malicious attachments4.2 Medium
- authzed spicedbSpiceDB: LookupSubjects may return partial results if a specific kind of relation is used2.2 Low
- evmosEvmos' transaction execution not accounting for all state transition after interaction with precompiles9.1 Critical
- soflyy import any xml or csv file to wordpressWordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net, wolf – wordpress posts bulk editor and manager professional, pluginus bear - woocommerce bulk editor and products manager professional +1 more +3 moreCross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins4.3 Medium
- linux, linux kernel +1 morescsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()7.1 High
- linux, linux kernel +1 moreselinux: fix NULL-pointer dereference when hashtab allocation fails5.5 Medium
- linux, linux kernel +1 morex86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails5.5 Medium
- linux, linux kernel +1 morescsi: advansys: Fix kernel pointer leak5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: kTLS, Fix crash in RX resync flow9.8 Critical
- linux, linux kernel +1 morehugetlb, userfaultfd: fix reservation restore on userfaultfd error5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Update error handler for UCTX and UMEM5.5 Medium
- linux, linux kernel +1 moreALSA: usb-audio: fix null pointer dereference on pointer cs_desc5.5 Medium
- linux, linux kernel +1 moreusb: typec: tipd: Remove WARN_ON in tps6598x_block_read5.5 Medium
- linux, linux kernel +1 moresched/fair: Prevent dead task groups from regaining cfs_rq's7.8 High
- linux, linux kernel +1 moreALSA: gus: fix null pointer dereference on pointer block5.5 Medium
- linux, linux kernel +1 moreusb: host: ohci-tmio: check return value after calling platform_get_resource()5.5 Medium
- linux, linux kernel +1 moreclk: sunxi-ng: Unregister clocks/resets when unbinding5.5 Medium
- linux, linux kernel +1 morenet: dpaa2-eth: fix use-after-free in dpaa2_eth_remove7.8 High
- linux, linux kernel +1 morescsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()8.8 High
- Show moreLoading…