CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- helloassoWordPress HelloAsso plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- quantumcloud infographic maker – ilist, infographic maker +1 moreWordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- marco gasi language switcher for transposhWordPress Language Switcher for Transposh plugin <= 1.5.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- creative interactive media 3d flipbook, pdf viewer, pdf embedder – real 3d flipbook wordpress pluginWordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fahad mahmood rss feed widgetWordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- tickeraTickera < 3.5.2.5 - Ticket leakage through IDOR5.3 Medium
- koha community kohal2c2technologies Koha opac-MARCdetail.pl cross site scripting3.5 Low
checkstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- flusityAn issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the...9.8 Critical
- inducer relateAn issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via...8.8 High
- inducer relateCross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to...2.6 Low
- raidenmaildDirectory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote...7.6 High
- ruijie rg-rsr10-01g-t\(wa\)-sAn issue in ruijie.com/cn RG-RSR10-01G-T(WA)-S RSR_3.0(1)B9P2_RSR10-01G-TW-S_07150910 and RG...8.8 High
- No product listedInsecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version...7.3 High
- h3c er8300g2-xH3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's...9.8 Critical
- flusityAn issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted...9.8 Critical
- oretnom23 computer laboratory management systemComputer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter...9.4 Critical
- emqx nanomqA heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows...6.8 Medium
- dronecode px4 drone autopilotAn issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and...4.4 Medium
- dedecmsA File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via...9.8 Critical
- syliusSylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book6.4 Medium
- mozilo mozilocmsAn issue discovered in moziloCMS v2.0 allows attackers to bypass file upload restrictions and run...6.5 Medium
- innovaphone pbxCross Site Scripting vulnerability in Innovaphone myPBX v.14r1, v.13r3, v.12r2 allows a remote...6.3 Medium
- openstack storletsOpenStack Storlets arbitrary code execution vulnerability4.9 Medium
- json pdf2jsonA buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary...7.8 High
- No product listedCross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360,...6.1 Medium
- trainme acadamy ichinSQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to...9.1 Critical
- axefinance axe credit portalA SQL injection vulnerability via the Save Favorite Search function in Axefinance Axe Credit...5.4 Medium
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6...5.3 Medium
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite...4.4 Medium
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a...8.2 High
- tormach pathpilot controller, pilotpath controller +1 moreIncorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows...6.5 Medium
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a...7.5 High
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to erase a...6.5 Medium
- No product listedA certain software build for the Sharp Rouvo V device (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A...4.3 Medium
- boost mobile celero 5g, motorola moto g power, moto g pure +4 more +6 moreAn issue was discovered in a third-party component related to vendor.gsm.serial, shipped on...3.4 Low
- orbic mauiA certain software build for the Orbic Maui device (Orbic/RC545L/RC545L:10/ORB545L_V1.4.2_BVZPP...6.2 Medium
- No product listedVarious software builds for the AT&T Calypso, Nokia C100, Nokia C200, and BLU View 3 devices leak...5.5 Medium
- tcl 30z firmwareVarious software builds for the following TCL devices (30Z, A3X, 20XE, 10L) leak the device IMEI...8.8 High
- No product listedAn issue was discovered in a third-party com.factory.mmigroup component, shipped on devices from...8.4 High
- tcl 30z firmwareVarious software builds for the following TCL 30Z and TCL A3X devices leak the ICCID to a system...8.0 High
- tcl 10l firmware, 30z firmware +1 moreCertain software builds for the TCL 30Z and TCL 10 Android devices contain a vulnerable, pre...7.8 High
- No product listedCertain software builds for the Itel Vision 3 Turbo Android device contain a vulnerable pre...6.1 Medium
- nokia c200Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable,...7.3 High
- tcl 20xeCertain software builds for the TCL 20XE Android device contain a vulnerable, pre-installed app...8.7 High
- No product listedAn issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on...7.1 High
- sharp rouvo v, bluview +1 moreCertain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable...7.8 High
- insyde insydeh2o, kernel +1 moreAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm...5.3 Medium
- osm n2vcImproper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker...7.5 High
- Show moreLoading…