CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- opentelemetry, open-telemetry opentelemetry-dotnet +1 moreSensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore4.1 Medium
- automatic1111 stable-diffusion-webuiLimited file write in Stable-diffusion-webui - GHSL-2024-0106.3 Medium
- acquia mauticServer-Side Request Forgery in Asset section6.5 Medium
- xibosignage xibo, xibo-cms +1 moreSession Hijacking via XSS attack in header and session grid in Xibo CMS8.8 High
- xibosignage xibo, xibo-cms +1 moreSession Hijacking via token exposure on the session page in Xibo CMS7.2 High
- zauberzeug niceguiLocal File Inclusion in NiceGUI leaflet component8.2 High
- netdatandsudo: local privilege escalation via untrusted search path8.8 High
- wintercms wn-dusk-pluginDusk plugin may allow unfettered user authentication in misconfigured installs8.8 High
- acquia mauticSensitive Data Exposure due to inadequate user permission settings8.3 High
- acquia mauticSQL Injection in dynamic Reports6.6 Medium
- acquia mauticRelative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)8.1 High
- traefikPossible denial of service vulnerability with Content-length header in Traefik7.5 High
- campcodes house rental management systemCampcodes House Rental Management System manage_payment.php sql injection6.3 Medium
- dell storage resource manager, storage monitoring and reporting +1 moreDell Storage Resource Manager, 4.9.0.0 and below, contain(s) a Session Fixation Vulnerability in...5.9 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy session fixation6.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy information disclosure4.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy improper privilege control4.4 Medium
- campcodes house rental management systemCampcodes House Rental Management System manage_tenant.php sql injection6.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy cross-site scripting6.1 Medium
- campcodes house rental management systemCampcodes House Rental Management System view_payment.php sql injection6.3 Medium
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System Users.php cross site scripting3.5 Low
- phpgurukul small crmPHPGurukul Small CRM Registration Page sql injection7.3 High
- juniper junos os evolvedJunos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash8.7 High
- juniper junos, junos os +1 moreJunos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed6.3 Medium
- juniper junos os evolvedJunos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced6.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: Firewall filter not blocking egress traffic6.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured8.7 High
- iosix io-1020 micro eldIOSIX IO-1020 Micro ELD Download of Code Without Integrity Check9.6 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash7.1 High
- iosix io-1020 micro eldIOSIX IO-1020 Micro ELD Use of Default Credentials7.4 High
- iosix io-1020 micro eldIOSIX IO-1020 Micro ELD Use of Default Credentials7.4 High
- timber team & contributors timberWordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerability8.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps7.1 High
- juniper junos, junos os +1 moreJunos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs8.7 High
- juniper junos, junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service8.7 High
- juniper junos os evolved, paragon active assurance test agent +1 moreJunos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials6.7 Medium
- juniper cloud native router, crpd, juniper networks, inc. cloud native router (jcnr) +2 more[Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks9.2 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).6.9 Medium
- juniper junosJunos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.6.9 Medium
- apache solr operatorApache Solr Operator: Solr-Operator liveness and readiness probes may leak basic auth credentials6.5 Medium
- phpgurukul small crmPHPGurukul Small CRM Change Password sql injection6.3 Medium
- php, debian linux +1 morePHP function password_verify can erroneously return true when argument contains NUL6.5 Medium
- Show moreLoading…