CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- honeywell experion serverServer receiving a malformed message to create a new connection could lead to an attacker...8.1 High
- honeywell experion serverServer receiving a malformed message creates connection for a hostname that may cause a stack...7.4 High
- honeywell experion serverServer receiving a malformed message that uses the hostname in an internal table may cause a...8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moretracing/trigger: Fix to return error if failed to alloc snapshot5.5 Medium
- linux, linux kernel +1 moreusb: ulpi: Fix debugfs directory leak7.8 High
- linux, linux kernel +1 morePCI: Fix active state requirement in PME polling5.5 Medium
- debian linux, linux kernel +1 morescsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"5.5 Medium
- linux, linux kernel +1 moreRevert "drm/amd: flush any delayed gfxoff on suspend entry"5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Reset IH OVERFLOW_CLEAR bit5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: fix incorrect mpc_combine array size7.8 High
- linux, linux kernel +1 moredrm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue7.8 High
- linux, linux kernel +1 moredrm/nouveau: fix several DMA buffer leaks5.5 Medium
- linux, linux kernel +1 moredrm/buddy: Fix alloc_range() error handling code7.8 High
- linux, linux kernel +1 morenetfilter: ipset: fix performance regression in swap operation4.7 Medium
- linux, linux kernel +1 morepmdomain: mediatek: fix race conditions with genpd4.7 Medium
- metal3-io ironic-imageIronic-image allows unauthenticated local access to Ironic API4.7 Medium
- solanalabs web3, solana-labs solana-web3.js +1 moreHandling untrusted input can result in a crash, leading to loss of availability / denial of service7.5 High
- blazemeter jenkins plugin, jenkins blazemeter plugin +1 moreCSRF in BlazeMeter Jenkins plugin4.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco's Blind SSRF Leads to Port Scan by using Webhooks4.1 Medium
- red hat build of keycloak 22Keycloak: path traversal in the redirect validation7.1 High
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +20 more +22 moreKeycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos7.4 High
- redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 moreKeycloak: path transversal in redirection validation8.1 High
- peplink smart reader, smart reader firmware +1 moreAn information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi...5.3 Medium
- peplink smart reader, smart reader firmware +1 moreAn information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi...5.3 Medium
- peplink smart reader, smart reader firmware +1 moreA data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi...8.3 High
- peplink smart reader, smart reader firmware +1 moreA privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart...6.8 Medium
- peplink smart reader, smart reader firmware +1 moreAn OS command injection vulnerability exists in the web interface mac2name functionality of...9.1 Critical
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)6.4 Medium
- tenda ac500, ac500 firmware +1 moreTenda AC500 DhcpListClient fromDhcpListClient stack-based overflow8.8 High
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute6.4 Medium
- tenda ac500, ac500 firmware +1 moreTenda AC500 execCommand formexeCommand stack-based overflow8.8 High
- tenda ac500, ac500 firmware +1 moreTenda AC500 WriteFacMac formWriteFacMac command injection6.3 Medium
- tenda ac500, ac500 firmware +1 moreTenda AC500 setcfm formSetCfm stack-based overflow8.8 High
- joris van montfort jvm rich text icons, jorisvm jvm gutenberg rich text icons +1 moreWordPress JVM rich text icons plugin <= 1.2.6 - Arbitrary File Deletion vulnerability7.7 High
- undsgn uncode coreWordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability7.7 High
- tenda ac500, ac500 firmware +1 moreTenda AC500 QuickIndex formQuickIndex stack-based overflow8.8 High
- tenda ac500, ac500 firmware +1 moreTenda AC500 execCommand R7WebsSecurityHandler stack-based overflow8.8 High
- linux, linux kernel +1 moresoc: qcom: pmic_glink_altmode: fix drm bridge use-after-free7.0 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreRDMA/mlx5: Fix fortify source warning while accessing Eth segment7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security5.5 Medium
- linux, linux kernel +1 moreperf: RISCV: Fix panic on pmu overflow handler5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moredo_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak5.5 Medium
- linux, linux kernel +1 moremd: fix kmemleak of rdev->serial5.5 Medium
- linux, linux kernel +1 moreblock: fix deadlock between bd_link_disk_holder and partition scan5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreaoe: fix the potential use-after-free problem in aoecmd_cfg_pkts7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete4.7 Medium
- linux, linux kernel +1 morewifi: wfx: fix memory leak when starting AP5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()6.0 Medium
- Show moreLoading…