CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- debian linux, linux kernel +1 morenvme-fc: do not wait in vain when unloading module4.4 Medium
- debian linux, linux kernel +1 morescsi: target: core: Add TMF to tmr_list handling7.5 High
- linux, linux kernel +1 moreblock: Fix WARNING in _copy_from_iter5.5 Medium
- debian linux, linux kernel +1 moreefi: runtime: Fix potential overflow of soft-reserved region size6.0 Medium
- linux, linux kernel +1 morescsi: ufs: core: Fix shift issue in ufshcd_clear_cmd()7.8 High
- linux, linux kernel +1 moreLoongArch: Update cpu_sibling_map when disabling nonboot CPUs5.5 Medium
- linux, linux kernel +1 morecachefiles: fix memory leak in cachefiles_add_cache()5.5 Medium
- debian linux, linux kernel +1 moreIB/hfi1: Fix a memleak in init_credit_return5.5 Medium
- linux, linux kernel +1 moreRDMA/irdma: Fix KASAN issue with tasklet7.8 High
- linux, linux kernel +1 morenet: bridge: switchdev: Skip MDB replays of deferred events on offload4.7 Medium
- linux, linux kernel +1 moreplatform/x86: think-lmi: Fix password opcode ordering for workstations7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morenetfilter: nf_tables: set dormant flag on hook register failure5.5 Medium
- linux, linux kernel +1 morenetfilter: nft_flow_offload: release dst in case direct xmit path is used7.5 High
- debian linux, linux kernel +1 moredrm/amd/display: Fix memory leak in dm_sw_fini()5.5 Medium
- linux, linux kernel +1 moremm: zswap: fix missing folio cleanup in writeback race path5.5 Medium
- linux, linux kernel +1 moremedia: ir_toy: fix a memleak in irtoy_tx5.5 Medium
- kendysond payment forms for paystackWordPress Payment Forms for Paystack plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- envothemes envo extraWordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- cssigniterteam elements plus!, wordpress cssigniter elements team +1 moreWordPress Elements Plus! plugin <= 2.16.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 moreWordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- detheme dethemekit for elementorWordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- loopus wp cost estimation & payment forms builderWordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- flector easy textillateWordPress Easy Textillate plugin <= 2.02 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jotform online formsWordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- seerox wp dynamic keywords injectorWordPress WP Dynamic Keywords Injector plugin <= 2.3.18 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- linux, linux kernel +1 morenet/handshake: Fix handshake_req_destroy_test15.5 Medium
- linux, linux kernel +1 morei40e: Do not allow untrusted VF to remove administratively set MAC8.4 High
- linux, linux kernel +1 morecifs: fix underflow in parse_server_interfaces()9.4 Critical
- linux, linux kernel +1 moremptcp: fix data re-injection from stale subflow7.5 High
- debian linux, linux kernel +1 morenfc: nci: free rx_data_reassembly skb on NCI device cleanup5.5 Medium
- linux, linux kernel +1 morecrypto: algif_hash - Remove bogus SGL free on zero-length error path7.8 High
- linux, linux kernel +1 moreirqchip/gic-v3-its: Restore quirk probing for ACPI-based systems7.8 High
- linux, linux kernel +1 moresmb: client: set correct id, uid and cruid for multiuser automounts8.7 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morehv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed5.5 Medium
- linux, linux kernel +1 moretools/rtla: Fix clang warning about mount_point var size5.5 Medium
- linux, linux kernel +1 moreiio: core: fix memleak in iio_device_register_sysfs5.5 Medium
- debian linux, linux kernel +1 moremedia: rc: bpf attach/detach requires write permission7.8 High
- momostefan yoga schedule momoyogaWordPress Yoga Schedule Momoyoga plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- presstigers simple testimonials showcaseWordPress Simple Testimonials Showcase plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- everest themes gucherry blogWordPress GuCherry Blog theme <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mitchell bennis simple file listWordPress Simple File List Plugin <= 6.1.9 is vulnerable to Arbitrary File Deletion7.5 High
- ninjaforms ninja forms, saturday drive ninja forms contact form +1 moreWordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion6.8 Medium
- supsystic data tables generatorWordPress Data Tables Generator by Supsystic Plugin <= 1.10.25 is vulnerable to Broken Access Control4.3 Medium
- peter shaw lh add media from urlWordPress LH Add Media From Url plugin <= 1.22 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- jojaba access category passwordWordPress Access Category Password plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- trade pips wp tradingviewWordPress WP TradingView plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- joshua eldridge easy countdownerWordPress Easy CountDowner plugin <= 1.0.8 - CSRF to XSS vulnerability6.5 Medium
- openanolis anolis osNULL pointer deference in acpi_db_convert_to_package of Linux acpi module5.3 Medium
- joomunited wp file download lightWordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…