CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, valhall gpu kernel driver +2 moreMali GPU Kernel Driver allows improper GPU memory processing operations5.9 Medium
- arm 5th gen gpu architecture kernel driver, bifrost gpu kernel driver, midgard gpu kernel driver +1 more +3 moreMali GPU Kernel Driver allows improper GPU memory processing operations6.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreTLS/SSL weak message authentication code ciphers are added by default for port 180827.5 High
- broadcom brocade sannav, brocade sannav +1 moreSQL Table names, column names, and SQL queries are collected in DR standby Supportsave7.7 High
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points4.4 Medium
- studiopress genesis blocksGenesis Blocks < 3.1.3 - Contributor+ Stored XSS6.8 Medium
- broadcom brocade sannav, brocade sannav +1 morehard-coded credentials in the documentation that appear as the appliance root password7.5 High
- broadcom brocade sannav, brocade sannav +1 moreInsecure backup6.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files5.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsecure file permission setting that makes files world-readable5.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav contains hardcoded TLS keys used by Docker1.9 Low
- broadcom brocade sannav, brocade sannav +1 moresupply-chain attack risk8.2 High
- broadcom brocade sannav, brocade sannav +1 moreIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)6.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save8.6 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.7.5 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key is stored in the DR log files7.5 High
- ays-pro poll maker, poll maker – versus polls, anonymous polls, image polls +1 morePoll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting7.2 High
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block5.4 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'6.1 Medium
- maxfoundry media library foldersMedia Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'6.1 Medium
- wpmet elementskit, elementskit pro +1 moreElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'6.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
tigervncMageia,x11-serverMageia,x11-server-xwaylandMageia +2 moreUpdated x11-server, x11-server-xwayland & tigervnc packages fix security vulnerabilityNo score- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...5.3 Medium
- ivanti avalancheA Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...8.1 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...5.3 Medium
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...5.3 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheA Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...9.8 Critical
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...7.1 High
- ivanti avalancheA Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche...6.5 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...7.1 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheAn Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...8.8 High
- ivanti avalanche, avlanche +1 moreA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheA Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...9.8 Critical
- ivanti avalancheA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows...8.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheA Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows...8.8 High
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.8.8 High
- ivanti avalancheA Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche...6.5 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...8.8 High
- ivanti avalancheAn Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3...8.8 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...4.3 Medium
- ivanti avalancheAn out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...7.5 High
- ivanti avalancheAn Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...7.5 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...5.3 Medium
- Show moreLoading…