CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through...2.4 Low
- f-logic datacube3, datacube3 firmware +1 moreSQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain...9.8 Critical
- sem-cms semcmsSQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive...9.8 Critical
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute...8.0 High
- derbynetSQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL...8.1 High
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute...6.3 Medium
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute...4.6 Medium
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute...6.5 Medium
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute...4.6 Medium
- derbynetSQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute...9.8 Critical
- derbynetSQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code...9.8 Critical
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute...5.4 Medium
- derbynetCross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute...7.4 High
- andrei-tatar nora-firebase-common@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability9.8 Critical
- dromara open-capacity-platformDromara open-capacity-platform auth-server heapdump information disclosure4.3 Medium
- octopus serverIt is possible for an API key to be logged in clear text in the audit log file after an invalid...4.3 Medium
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function8.1 High
- linux ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function8.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function8.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function8.1 High
derbynpmPrototype pollution in emit functionNo score- broadcom brocade sannav, brocade sannav +1 moreInsertion of Sensitive Information into Brocade SANnav Log File5.0 Medium
- broadcom brocade sannav, brocade sannav +1 moreClear text storage of sensistive information by manipulating command variables5.5 Medium
- excalidrawexcalidraw vulnerable to a Stored XSS in excalidraw's web embed component6.1 Medium
- robodkRoboDK Heap-based Buffer Overflow3.3 Low
- hashicorp go-getter, shared library +1 moreHashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches9.8 Critical
- netapp ontap select deploy administration utility, clustered data ontap +1 moreDefault Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility5.4 Medium
- netapp ontap select deploy administration utilityPrivilege Escalation Vulnerability in ONTAP Select Deploy administration utility8.1 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav has weak encryption in internal SSH ports5.7 Medium
- jaspersoft jasperreports serverReflected Cross Site Scripting (XSS) vulnerability8.3 High
- xpdfOut-of-bounds stack array write in Xpdf 4.05 due to missing zero check2.9 Low
- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7 +2 moreKeycloak: impersonation via logout token exchange3.4 Low
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.10 +2 more +4 moreKeycloak: session hijacking via re-authentication6.5 Medium
- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7 +5 more +7 moreKeycloak: log injection during webauthn authentication or registration5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.3.1, v2.3.0a uses weak encryption7.5 High
github.com/evmos/evmosGo,github.com/evmos/evmos/v10Go,github.com/evmos/evmos/v11Go +11 more +13 moreEvmos vulnerable to unauthorized account creation with vesting moduleNo scoregithub.com/evmos/evmosGo,github.com/evmos/evmos/v10Go,github.com/evmos/evmos/v11Go +9 more +11 moreEvmos vulnerable to DOS and transaction fee expropiation through Authz exploit9.1 Critical- red hat build of keycloak 22, build of keycloak 22.0.10, single sign-on 7.6 for rhel 7 +4 more +6 moreKeycloak: authorization bypass5.4 Medium
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +18 more +20 moreKeycloak: xss via assertion consumer service url in saml post-binding flow6.0 Medium
- red hat build of keycloak 22, build of keycloak 22.0.10, rhsso 7.6.8 +2 moreKeycloak: secondary factor bypass in step-up authentication5.0 Medium
- google chrome, v8, fedoraproject fedora +2 moreUse after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to...6.5 Medium
- solarwinds serv-u, servu +1 moreSolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability8.4 High
- honeywell c300Controller denial of service due to improper handling of a specially crafted message received by...5.9 Medium
- honeywell experion serverServer communication with a controller can lead to remote code execution using a specially...5.9 Medium
- honeywell experion serverServer information leak for the CDA Server process memory can occur when an error is generated in...5.9 Medium
- honeywell experion serverServer receiving a malformed message can cause a pointer to be overwritten which can result in a...8.1 High
- honeywell experion serverServer hostname translation to IP address manipulation which could lead to an attacker performing...8.1 High
- honeywell experion serverServer receiving a malformed message based on a using the specified key values can cause a stack...8.1 High
- honeywell experion serverServer receiving a malformed message based on a using the specified key values can cause a heap...8.1 High
- honeywell experion serverServer receiving a malformed message based on a list of IPs resulting in heap corruption causing...5.9 Medium
- Show moreLoading…