CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
checkstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- sem-cms semcmsAn issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script.7.1 High
- cmsimpleCross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute...4.5 Medium
- maccmsCross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to...7.3 High
- wuzhicmsA stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of...4.6 Medium
- webidsupport webidWebid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control...8.8 High
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The web application does not restrict or...7.5 High
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The web server fails to sanitize input data,...7.5 High
- jasper project jasperIn Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an...7.5 High
- secu secustation firmwareSecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to...6.5 Medium
- linuxfoundation pytorch, pytorchlightning pytorch lightning +1 morePytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit...5.5 Medium
- cutehttpfileserverCuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows...7.1 High
- oretnom23 computer laboratory management systemComputer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter...9.1 Critical
- oretnom23 computer laboratory management systemComputer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter...9.8 Critical
- tramyardg autoexpressSQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands...7.3 High
- cszcms csz cmsCross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute...5.4 Medium
- arm mbed osBuffer Overflow vulnerability in ARM mbed-os v.6.17.0 allows a remote attacker to execute...7.0 High
- tcpdf project tcpdf, fedoraproject fedora +1 moreTCPDF vulnerable to Regular Expression Denial of Service7.5 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...6.7 Medium
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...3.6 Low
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...8.0 High
- ffmpegBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...7.8 High
- mitre calderaBuffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of...3.3 Low
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...8.0 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...4.0 Medium
- dymo labelwriter print serverDYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could...8.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...8.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...8.0 High
- hexo themesAn issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass...9.8 Critical
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 moreElectrolink FM/DAB/TV Transmitter Cleartext Storage of Sensitive Information8.7 High
- 0xacab mat2, electrolink compact dab transmitter, compact fm transmitter +6 more +8 moreElectrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function8.7 High
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 moreElectrolink FM/DAB/TV Transmitter Missing Authentication for Critical Function6.9 Medium
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 moreElectrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking8.7 High
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 moreElectrolink FM/DAB/TV Transmitter Reliance on Cookies without Validation and Integrity Checking8.7 High
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 moreElectrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data8.7 High
- electrolink compact dab transmitter, compact fm transmitter, digital fm transmitter +5 more +7 moreElectrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data8.7 High
- mobyMoby IPv6 enabled on IPv4-only network interfaces4.7 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access control3.5 Low
- denoRace condition when flushing input stream leads to permission prompt bypass7.7 High
- cisco clamav, clam antivirus +1 moreClamAV HTML Parser Denial of Service Vulnerability7.5 High
- fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 moreSssd: race condition during authorization leads to gpo policies functioning inconsistently7.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability6.5 Medium
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Edge for Android (Chromium-based) Information Disclosure Vulnerability5.4 Medium
- getsentry sentrySentry's superuser cleartext password leaked in logs7.3 High
- hcl software connectionsHCL Connections is vulnerable to a user enumeration vulnerability3.5 Low
- flatpak, fedoraproject fedora +1 moreFlatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing8.4 High
- Show moreLoading…