CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- watchdog antivirusWatchdog Antivirus v1.6.415 - Denial of Service5.5 Medium
- bkav homeBkav Home v7816, build 2403161130 - Kernel Memory Leak5.5 Medium
- rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 morertMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode8.8 High
perl-ClipboardMageiaUpdated perl-Clipboard package fix security vulnerabilityNo score- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...7.5 High
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...9.8 Critical
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...7.5 High
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...6.5 Medium
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...8.8 High
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...7.3 High
- tasemulators fceuxThe network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to...8.8 High
- terratec dmx 6fire 24\/96 controlpanelAn unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local...6.7 Medium
- ruijienetworks rg-rsr10-01g-t, rg-rsr10-01g-t firmware +1 moreAn issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version...8.8 High
- hadskyA stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3...5.4 Medium
- dronecode px4 drone autopilotPX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the...5.6 Medium
- flipsnackAn issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via...7.5 High
- quickjs project quickjsQuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage...3.9 Low
- quickjs project quickjsQuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an...7.5 High
- kubernetesBypassing mountable secrets policy imposed by the ServiceAccount admission plugin2.7 Low
- nixos hydraHydra has persistent XSS vulnerability serving HTML build outputs4.6 Medium
dbt-corePyPIdbt uses a SQLparse version with a high vulnerability7.5 High- skylot jadxInsufficient input filtering of "package name" allows command execution in the device with shell privileges6.1 Medium
- freerdp, fedoraproject fedora +1 moreFreeRDP Out-Of-Bounds Read in interleaved_decompress8.1 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Out-Of-Bounds Read in ncrush_decompress9.8 Critical
- freerdp, fedoraproject fedora +1 moreFreeRDP Out-Of-Bounds Read in planar_skip_plane_rle9.8 Critical
- freerdp, fedoraproject fedora +1 moreFreeRDP OutOfBound Read in zgfx_decompress_segment9.8 Critical
- freerdp, fedoraproject fedora +1 moreFreeRDP vulnerable to integer underflow in nsc_rle_decode8.1 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_data9.8 Critical
- crushftpUnauthenticated arbitrary file read and remote code execution in CrushFTP9.8 Critical
- hoppscotch@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE8.4 High
- librenmsLibreNMS's Time-Based Blind SQL injection leads to database extraction7.2 High
- librenmsLibreNMS's Improper Sanitization on Service template name leads to Stored XSS7.1 High
- librenmsLibreNMS vulnerable to time-based SQL injection that leads to database extraction7.1 High
io.github.skylot:jadx-coreMavenJADX file override vulnerability3.3 Lowgithub.com/authelia/authelia/v4GoAuthelia's Group Changes may not have the expected results (YAML file backend)1.6 Low- ant-media ant-media-serverAnt Media Server vulnerable to local privilege escalation7.8 High
polkitSUSESecurity update for polkitNo scorepolkitopenSUSESecurity update for polkitNo score- apache hugegraph, hugegraph-server +1 moreApache HugeGraph-Server: Bypass whitelist in Auth mode9.1 Critical
- apache hugegraph, hugegraph-server +1 moreApache HugeGraph-Server: Command execution in gremlin9.8 Critical
- apache hugegraph-hubbleApache HugeGraph-Hubble: SSRF in Hubble connection page5.3 Medium
- essential addons for elementor pro, wpdeveloper essential addons for elementor +1 moreEssential Addons for Elementor Pro <= 5.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag'6.4 Medium
- holdedCross-Site Scripting in the Holded application4.6 Medium
- bdthemes prime slider – addons for elementor, prime slider, elementor +2 moreWordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability4.3 Medium
- bdthemes prime slider – addons for elementor, prime slider +1 moreWordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability7.1 High
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability5.3 Medium
- wpclever wpc frequently bought together for woocommerce, wpc product bundles for woocommerce +1 moreWordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability4.3 Medium
- long watch studio myrewardsWordPress MyRewards plugin <= 5.3.0 - Broken Access Control vulnerability6.5 Medium
- realmag777 active products tables for woocommerce, pluginus woot +1 moreWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability5.3 Medium
- valvepress automatic, wordpress automatic plugin +1 moreWordPress Automatic plugin < 3.93.0 - Multiple Cross Site Request Forgery (CSRF) vulnerability7.6 High
- Show moreLoading…