CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- coded commerce, llc benchmark email liteWordPress Benchmark Email Lite plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- metagauss profilegridWordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- lifterlmsWordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- elextensions elex woocommerce dynamic pricing and discountsWordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway cross-site scripting4.8 Medium
- ibm storage defender, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service privilege escalation6.4 Medium
- wpvivid migration\, backup\, staging, wpvividplugins wpvivid — backup, migration & staging +1 moreWPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization7.2 High
- levelfourstorefront shopping cart & ecommerce store, wp easycart shopping cart and ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection8.8 High
- xylus themes wp event aggregatorWordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- arnan de gans no-bot registrationWordPress No-Bot Registration plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect10.0 Critical
- apache kafkaApache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode7.4 High
- tiagorlampert chaostiagorlampert CHAOS vulnerable to arbitrary code execution9.8 Critical
- ibm sterling b2b integratorIBM Sterling B2B Integrator cross-site scripting4.8 Medium
- get bowtied shopkeeper extenderShopkeeper Extender <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- shamsbd71 all-in-one addons for elementor – widgetkit, themesgrove all-in-one addons for elementor +1 moreAll-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets6.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator cross-site scripting5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator cross-site scripting5.4 Medium
- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
ghostscriptOSS-FuzzHeap-use-after-free in gx_device_forward_finalizeNo score- tiagorlampert chaostiagorlampert CHAOS vulnerable to Cross Site Scripting4.8 Medium
- derbynetDirectory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary...9.8 Critical
- rainbow external link network disk external link network diskCross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote...6.1 Medium
- ametysAn issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via...5.3 Medium
- atlassian floodlight controller, projectfloodlight open sdn controller +1 moreAn issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial...6.3 Medium
- ruoyiAn issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the...7.5 High
- openstack magnum, magnum-yoga-eom +1 moreOpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack9.8 Critical
- weave desktopAn issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a...7.8 High
- amcs trux waste management software, amcsgroup trux waste management +1 moreAn issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018...6.2 Medium
- bandisoft bandiviewBuffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a...5.5 Medium
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to...8.0 High
- cobham sailor vsat ku, sailor 600 vsat ku firmware +1 moreAn issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code...8.1 High
- cobham sailor 600 vsat ku firmwareCross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote...6.1 Medium
- cobham sailor 600 vsat ku, sailor 600 vsat ku firmware, sailor 800 vsat +1 more +3 moreCross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019 allows a remote...6.5 Medium
- cobham sailor 600 vsat ku firmwareCross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote...6.1 Medium
- cobham sailor 600 vsat ku, sailor 600 vsat ku firmware +1 more\An issue was discovered in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute...4.8 Medium
- cobham sailor 600 vsat ku firmwareCross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote...8.2 High
- circontrol raption serverThe server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer...8.8 High
- acquia mauticXSS Cross-site Scripting Stored (XSS) - Description field7.6 High
- kjd kjd/idna, internationalized domain names in applications +1 moreDenial of Service via Quadratic Complexity in kjd/idna6.2 Medium
phinnpmphin may include sensitive headers in subsequent requests after redirect4.3 Medium- matrix-org matrix-appservice-ircTruncated content of messages can be leaked from matrix-appservice-irc4.3 Medium
- honeywell experion server, experion lx, experion process knowledge system +1 more +3 moreServer receiving a malformed message that where the GCL message hostname may be too large which...7.4 High
- honeywell experion serverServer receiving a malformed message that causes a disconnect to a hostname may causing a stack...7.4 High
- honeywell c300C300 information leak due to an analysis feature which allows extracting more memory over the...7.5 High
nssUbuntunss regressionNo score- adobe illustratorAdobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability III.7.8 High
- Show moreLoading…