CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- asr falcon, asrmicro asr1602 firmware, asr1603 firmware +11 more +13 moreLogically dead code6.1 Medium
- asr falcon/crane, asrmicro asr1602 firmware, asr1603 firmware +11 more +13 moreUnsigned compared against 04.0 Medium
- asr falcon/crane, asrmicro asr1602 firmware, asr1603 firmware +11 more +13 morePrintf arg type mismatch in ATCMD6.6 Medium
- asr falcon/crane, asrmicro asr1602 firmware, asr1603 firmware +11 more +13 moreOut-of-bounds read in telephony7.2 High
- deltra electronics dvw-w02w2-e2, deltaww dvw-w02w2-e2 firmware +1 moreAuthenticated Remote Command Injection in Delta Electronics DVW9.8 Critical
- exclusive addons elementor, exclusiveaddons exclusive addons for elementor, tim strifler exclusive addons elementor +2 moreWordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- spring framework, vmware spring framework +1 moreCVE-2024-22262: Spring Framework URL Parsing with Host Validation8.1 High
- langchain, langchain-ai langchain-ai/langchain +1 morePath Traversal in langchain-ai/langchain6.5 Medium
- llamaindex, run-llama llama index, run-llama/llama index +2 moreCommand Injection in run-llama/llama_index9.8 Critical
- bentoml, bentoml bentoml/bentoml +1 moreInsecure Deserialization Leading to RCE in bentoml/bentoml10.0 Critical
- zenml, zenml-io zenml-io/zenml +1 moreDirectory Traversal in zenml-io/zenml9.9 Critical
- vertaai modeldb, vertaai/modeldb +1 morePath Traversal leading to Arbitrary File Write and RCE in vertaai/modeldb8.8 High
- lunary, lunary-ai lunary-ai/lunary +1 moreCase Insensitive Email Address Validation Vulnerability in lunary-ai/lunary7.5 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreArbitrary Local File Read via Component Method Invocation in gradio-app/gradio7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow9.3 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Input Validation in mintplex-labs/anything-llm9.0 Critical
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Input Validation in mintplex-labs/anything-llm7.2 High
- zenml, zenml-io zenml-io/zenml +1 moreSession Fixation Vulnerability in zenml-io/zenml4.2 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Authorization in lunary-ai/lunary7.5 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreAuthentication Bypass in parisneo/lollms-webui8.2 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary9.1 Critical
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreSQL Injection in parisneo/lollms-webui7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Read via Path Traversal in mlflow/mlflow7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal via Parameter Smuggling in mlflow/mlflow7.5 High
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreUncontrolled Resource Consumption in parisneo/lollms-webui5.3 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflow7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow, mflow +2 morePath Traversal Vulnerability in mlflow/mlflow7.5 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreSSRF Vulnerability in gradio-app/gradio6.5 Medium
- benoitc benoitc/gunicorn, gunicorn +1 moreHTTP Request Smuggling in benoitc/gunicorn7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreRelative Path Traversal in mintplex-labs/anything-llm8.1 High
- mindsdb, mindsdb mindsdb/mindsdb +1 moreCross-site Scripting (XSS) - Stored in mindsdb/mindsdb5.8 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreUnauthorized Radar Creation in lunary-ai/lunary7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflow8.1 High
- h2o, h2oai h2o-3, h2oai/h2o-3 +2 moreS3 Bucket Takeover in h2oai/h2o-37.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anything-llm, anythingllm +2 moreMass Assignment Vulnerability in mintplex-labs/anything-llm9.1 Critical
cockpitDebiancockpit - regression updateNo score- phpgurukul tourism management systemPhpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with...8.1 High
- phpgurukul tourism management systemPhpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with...8.8 High
- appmakes.io typoraAn issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information...6.1 Medium
- typoraCross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to...6.1 Medium
- sanluan flipped aurora gin vueAn issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges...4.7 Medium
- publiccmsAn issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the...8.8 High
- shibangcommunications ip network intercom broadcasting systemFile Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting...8.8 High
- xunruicmsCross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote...6.1 Medium
- dolibarr erp\/crmDolibarr vulnerable to Cross-Site Request Forgery7.5 High
- No product listedcskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old...4.3 Medium
- laravel frameworkAn issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database...No score
- accredible credential.net credential.netThe API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object...7.5 High
- claris filemaker serverClaris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting...6.1 Medium
- rockwell automation 5015-aenftxt, rockwellautomation 5015-aenftxt firmware, 5015 aenftxt +2 moreRockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault7.5 High
- Show moreLoading…