CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- php group php, php archive tar +1 more__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix6.5 Medium
- php, fedoraproject fedora +1 moreCommand injection via array-ish $command parameter of proc_open()9.4 Critical
- phpPHP mb_encode_mimeheader runs endlessly for some inputs7.5 High
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance: probe_serviced exposes internal objects to local users8.4 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A low-privileged user can access confidential information5.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 300 Series: Specific link local traffic causes a control plane overload7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash7.1 High
- juniper junos os evolvedJunos OS Evolved: Packets which are not destined to the device can reach the RE7.1 High
- undsgn uncode, uncode core +1 moreWordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability8.8 High
- woocommerce shipping per productWordPress WooCommerce Shipping Per Product plugin <= 2.5.4 - Broken Access Control vulnerability4.3 Medium
- automattic wp job managerWordPress WP Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability5.3 Medium
- zhejiang land zongheng network technology o2oaZhejiang Land Zongheng Network Technology O2OA information disclosure3.7 Low
- xiamen four-faith rmp router management platformXiamen Four-Faith RMP Router Management Platform sql injection6.3 Medium
- bihell dicebihell Dice Comment cross site scripting3.5 Low
- acquia mauticXSS in Notifications via saving Dashboards4.8 Medium
- opengnsysExposure of Information Through Directory Listing vulnerability in OpenGnsys5.3 Medium
- opengnsysExposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenGnsys5.9 Medium
- opengnsysUnrestricted Upload of File with Dangerous Type vulnerability in OpenGnsys8.8 High
- opengnsysSQL Injection vulnerability in OpenGnsys9.8 Critical
- dedecmsDedeCMS update_guide.php path traversal4.3 Medium
- the tcpdump group tcpdumpinfinite loop in the PPP printer of tcpdump6.2 Medium
- ai engine project engine, jordy meow ai engine: chatgpt chatbot, meowapps ai engine +2 moreWordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability10.0 Critical
- givewpWordPress GiveWP plugin <= 2.25.1 - Cross Site Scripting (XSS) via render_dropdown vulnerability5.9 Medium
- xen, fedoraproject fedora +1 morex86: Incorrect logic for BTC/SRSO mitigations7.5 High
- xen, fedoraproject fedora +1 morex86 HVM hypercalls may trigger Xen bug check6.5 Medium
- webtoffee wordpress comments import & exportWordPress Comments Import & Export plugin <= 2.3.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- zaytech smart online order for cloverWordPress Smart Online Order for Clover plugin <= 1.5.5 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- dedecmsDedeCMS stepselect_main.php sql injection6.3 Medium
- nudgify social proof, sales popup & fomoWordPress Nudgify Social Proof, Sales Popup & FOMO plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- saumya majumder wp server health statsWordPress WP Server Health Stats plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- peepso community by peepsoWordPress Community by PeepSo plugin <= 6.3.1.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- jcodex woocommerce checkout field editor (checkout manager)WordPress WooCommerce Checkout Field Editor (Checkout Manager) plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- aerin loan repayment calculator and application formWordPress Loan Repayment Calculator and Application Form plugin <= 2.9.4 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- dfactory post views counterWordPress Post Views Counter plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- sumome sumoWordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerability3.7 Low
- apppresserWordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- supsystic easy google mapsWordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- supsystic ultimate maps by supsysticWordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability4.3 Medium
- contact form - repute infosystems arforms form builderWordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability6.3 Medium
- catch plugins generate child themeWordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- elementor hello elementorWordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- easy digital downloads digital downloads, sandhillsdev easy digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- fetch designs sign-up sheetsWordPress Sign-up Sheets plugin <= 2.2.11.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- rtcamp transcoderWordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tribulant slideshow galleryWordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- Show moreLoading…