CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- rockwell automation 1756-en4tr, compactlogix 5380, controllogix 5580 +9 more +11 moreRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value8.6 High
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout6.3 Medium
- sqlparse project sqlparsePassing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.7.5 High
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability4.3 Medium
- sixlabors imagesharpSixLabors.ImageSharp vulnerable to data leakage5.3 Medium
- sixlabors imagesharpMemory Allocation with Excessive Size Value in SixLabors.ImageSharp5.3 Medium
- argoproj argo cd, argo-cd +1 moreArgo CD' API server does not enforce project sourceNamespaces4.8 Medium
- vesystem cloud desktopVesystem Cloud Desktop fileupload2.php unrestricted upload6.3 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type4.4 Medium
- vesystem cloud desktopVesystem Cloud Desktop fileupload.php unrestricted upload6.3 Medium
github.com/traefik/traefikGo,github.com/traefik/traefik/v2Go,github.com/traefik/traefik/v3Go +2 moreTraefik affected by HTTP/2 CONTINUATION flood in net/httpNo scoregithub.com/edgelesssys/constellationGo,github.com/edgelesssys/constellation/v2Go +1 moreConstallation has pods exposed to peers in VPCNo score- lenovo preload directory, windows 7 and 8 pc preloads +1 moreA buffer overflow vulnerability was reported in a system recovery bootloader that was part of...6.4 Medium
- lenovo windows 7 and 8 pc preloadsA vulnerability was reported in a system recovery bootloader that was part of the Lenovo...6.7 Medium
- discourse discourse-reactionsDiscourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity page4.3 Medium
- lenovo fan power controller, nextscale n1200 enclosure firmware, smm, smm2, fpc +68 more +70 moreA command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an...7.2 High
- lenovo fan power controller, smm, smm2, fpc, system management module firmware +2 moreAn authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an...7.5 High
- lenovo fan power controller, smm, smm2, fpc, system management module firmware +2 moreA format string vulnerability was identified in SMM/SMM2 and FPC that could allow an...8.8 High
- lenovo fan power controller, smm, smm2, fpc, system management module firmware +2 moreA command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an...7.2 High
- combodo itopiTop limit pages/exec.php script to PHP files9.8 Critical
- combodo itopiTop vulnerable to potential formula injection in Excel/CSV export file8.0 High
- combodo itopiTop vulnerable to XSS vulnerability in authent-token8.8 High
- combodo itopiTop vulnerable to XSS vulnerability in dashlet refresh8.8 High
- combodo itopiTop vulnerable to XSS vulnerability in n:n relations "tagset" widget8.7 High
- hcl software devops deploy / launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / Launch is generating an obsolete HTTP header6.1 Medium
- combodo itopiTop missing silo check on extkey in console and portal4.1 Medium
- combodo itopiTop vulnerable to XSS in dashlet modifications ajax endpoints6.8 Medium
- combodo itopiTop vulnerable to XSS in friendlyname in object details5.7 Medium
- combodo itopiTop Dashboard editor vulnerable dashboard config file parameter5.0 Medium
- qr code bookmark system project code bookmark system, rems qr code bookmark system +1 moreSourceCodester QR Code Bookmark System sql injection6.3 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-site Scripting vulnerability in WBSAirback4.8 Medium
- wbsairback white bear solutions, whitebearsolutions wbsairback +1 moreUncontrolled Resource Consumption vulnerability in WBSAirback6.5 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreImproper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback6.6 Medium
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 morePath Traversal vulnerability in WBSAirback7.7 High
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreCross-Site Request Forgery (CSRF) vulnerability in WBSAirback8.8 High
- whitebearsolutions wbsairback, wbsairback white bear solutions +1 moreOS Command Injection vulnerability in WBSAirback9.1 Critical
- technicolor cga2121Information exposure vulnerability on Technicolor CGA21217.8 High
- buffalo wcr-1166ds firmware, wsr-1166dhp2 firmware, wsr-1166dhp firmware +12 more +14 moreOS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to...4.2 Medium
- buffalo a2533dhp2, wsr-2533dhp2 firmware, wsr-2533dhp firmware +6 more +8 morePlaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a...9.8 Critical
- cente ipv4, ipv4snmpv2, ipv4snmpv3 +12 more +14 moreGeneration of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If...5.3 Medium
- Show moreLoading…