CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- aditya88 online furniture shopping ecommerce websiteKashipara Online Furniture Shopping Ecommerce Website login.php cross site scripting3.5 Low
- aditya88 online furniture shopping ecommerce websiteKashipara Online Furniture Shopping Ecommerce Website prodInfo.php cross site scripting3.5 Low
- aditya88 online furniture shopping ecommerce websiteKashipara Online Furniture Shopping Ecommerce Website prodList.php cross site scripting3.5 Low
- aditya88 online furniture shopping ecommerce websiteKashipara Online Furniture Shopping Ecommerce Website search.php cross site scripting3.5 Low
- aditya88 online furniture shopping ecommerce websiteKashipara Online Furniture Shopping Ecommerce Website prodInfo.php sql injection6.3 Medium
- aditya88 online furniture shopping ecommerce websiteKashipara Online Furniture Shopping Ecommerce Website prodList.php sql injection6.3 Medium
- aditya88 online furniture shopping ecommerce website, kashipara e-commerce management software +1 moreKashipara Online Furniture Shopping Ecommerce Website search.php sql injection6.3 Medium
- edmundhung conformConform contains Prototype Pollution Vulnerability in `parseWith...` function8.6 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow8.8 High
- gohugo hugoHugo doesn't escape markdown title in internal render hooks6.1 Medium
- freerdp, fedoraproject fedora +1 moreFreeRDP rdp_redirection_read_base64_wchar out of bound read7.5 High
- freerdp, fedoraproject fedora +1 moreFreeRDP rdp_write_logon_info_v1 NULL access7.5 High
- freerdp, fedoraproject fedora +1 moreFreeRDP zgfx_decompress out of memory vulnerability7.5 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 SetRebootTimer formSetRebootTimer stack-based overflow8.8 High
- tenda ac8, ac8 firmware +1 moreTenda AC8 execCommand R7WebsSecurityHandler stack-based overflow8.8 High
- freerdp, fedoraproject fedora +1 morefreerdp_image_copy out of bound read9.8 Critical
- ezviz cs-c6-21wfr-8EZVIZ CS-C6-21WFR-8 Davinci Application certificate validation3.7 Low
- hualai isc5Hualai Xiaofang iSC5 certificate validation3.7 Low
- freerdp, fedoraproject fedora +1 moreFreeRDP ExtractRunLengthRegular* out of bound read9.8 Critical
- tillitis tkey-device-signer, tkey device signer +1 moreTillitis TKey Signer possible RAM disclosure vulnerability2.2 Low
- element-hq synapse, fedoraproject fedora +1 moreSynapse's V2 state resolution weakness allows DoS from remote room members6.5 Medium
- amd software: adrenalin edition, software: pro edition, radeon directx 11 driver dll +2 moreAn out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could...5.3 Medium
- amd software: adrenalin edition, software: pro edition +1 moreAn out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could...5.3 Medium
cgPyPIcg vulnerable to an Open Redirect Vulnerability on Referer Header6.1 Medium- renovatebot renovateRenovate 37.158.0 before 37.199.0 Command Injection via helmv38.4 High
- honoHono vulnerable to Restricted Directory Traversal in serveStatic with deno5.3 Medium
- offis dcmtk, debian linux +1 moreAn incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage...7.5 High
- anssi laitila shared filesWordPress Shared Files plugin <= 1.7.16 - Broken Access Control vulnerability5.3 Medium
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text6.4 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moredrm/amdgpu: validate the parameters of bo mapping operations more clearly7.8 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software cross-site scripting5.4 Medium
- welotec smart ems, vpn security suite +1 moreWelotec: Clickjacking Vulnerability in WebUI6.5 Medium
- magazine3 schema & structured data for wp & ampSchema & Structured Data for WP & AMP <= 1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via How To and FAQ Blocks6.4 Medium
- ayecode geodirectory, paoltaia geodirectory – wp business directory plugin and classified listings directory +1 moreGeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' Shortcode6.4 Medium
- rankmath seo, wordpress rank math seo, rankmath rank math seo – ai seo tools to dominate seo rankings +2 moreRank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper'6.4 Medium
grub2-commonTuxCare,grub2-efi-aa64-modulesTuxCare,grub2-efi-x64TuxCare +10 more +12 moreUpdate of grub2No score- qemu, netapp hci compute node, red hat enterprise linux 6 +15 more +17 moreQemu: sdhci: heap buffer overflow in sdhci_write_dataport()6.0 Medium
- rapid7 insight agent, insightvm +1 moreRapid7 Insight Agent Sensitive Key Exposed To Local Users6.8 Medium
- wordpress elespare, elespare – news, magazine and blog addons for elementor +1 moreElespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding Skills Required! <= 2.1.2 - Missing Authorization to Subscriber+ Arbitrary Post Cre…4.3 Medium
- kybernetikservices quick featured imagesQuick Featured Images <= 13.7.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting4.3 Medium
- logitech mevo webcam appMEVO WEBCAM APP Windows Unquoted Service Path Vulnerability4.4 Medium
- hitachi ops center analyzer, alaxala +1 moreSession Hijacking Vulnerability in Hitachi Ops Center Analyzer7.5 High
- hitachi ops center administratorInformation Exposure Vulnerability in Hitachi Ops Center Administrator4.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal elementor addons and templates, royal addons for elementor – addons and templates kit for elementor +2 moreRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags6.4 Medium
- royal-elementor-addons royal elementor addons, wordpress royal-elementor-addons, wproyal royal addons for elementor – addons and templates kit for elementor +2 moreRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- royal-elementor-addons royal elementor addons, wordpress royal-elementor-addons, wproyal royal addons for elementor – addons and templates kit for elementor +2 moreRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags6.4 Medium
- mysql2MySQL2 for Node Arbitrary Code Injection9.8 Critical
- incsub forminator, wpmudev broken link checker +1 moreForminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type...5.3 Medium
- incsub forminatorForminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is...7.2 High
- incsub forminatorForminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability...5.4 Medium
- Show moreLoading…