CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- portainerPortainer before 2.20.0 allows redirects when the target is not index.yaml.9.1 Critical
- oretnom23 employee task management systemSourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin...8.8 High
- jpressAn issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted...7.5 High
- szlbt lbt-t300-t400 firmwareBuffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2 allows...7.8 High
- cmseasyAn issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via...3.5 Low
- thinkcmfThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.9.8 Critical
- code-projects simple school management systemFile Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple...6.3 Medium
- bosscms, code-projects simple school management system +1 moreCross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code...7.1 High
- twcmsCross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary...5.0 Medium
- yealink vp59 firmwareAn issue discovered in Yealink VP59 Teams Editions with firmware version 91.15.0.118 allows a...6.8 Medium
- ed01-cms project ed01-cmsCross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive...4.7 Medium
- dedecmsCross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary...5.3 Medium
- powerdns recursor, powerdns +1 moreCrafted responses can lead to a denial of service in Recursor if recursive forwarding is configured7.5 High
- debian linux, linux kernel +1 morebinder: check offset alignment in binder_get_object()7.8 High
- ivanti connect secure, policy secure +1 moreAn Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of...7.5 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...5.3 Medium
- debian linux, linux kernel, siemens ruggedcom rm1224 lte(4g) eu +24 more +26 morenetfilter: nf_tables: release mutex after nft_gc_seq_end from abort path7.8 High
- debian linux, linux kernel +1 morenetfilter: nft_set_pipapo: do not free live element7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreaf_unix: Fix garbage collector racing against connect()7.8 High
- pyloadpyLoad allows upload to arbitrary folder lead to RCE9.1 Critical
- cisco telepresence management suite (tms), telepresence management suite +1 moreA vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS...5.4 Medium
- cisco telepresence management suite (tms), telepresence management suite +1 moreA vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS...5.4 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an...7.4 High
- cisco unified computing system (standalone), unified computing system e-series software (ucse), unified computing system +2 moreA vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an...8.8 High
- cisco unified computing system (standalone), unified computing system e-series software (ucse), unified computing system +1 more +3 moreA vulnerability in the web-based management interface of Cisco Integrated Management Controller ...8.7 High
- cisco adaptive security appliance, adaptive security appliance software, secure firewall adaptive security appliance (asa) software +2 more +4 moreA vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is...6.0 Medium
- tenda w15e, w15e firmware +1 moreTenda W15E guestWifiRuleRefresh stack-based overflow8.8 High
- tenda w15e, w15e firmware +1 moreTenda W15E SetSysTimeCfg formSetSysTime stack-based overflow8.8 High
- teamnewpipe newpipeNewPipe has potential security vulnerability when importing settings8.5 High
- tenda w15e, w15e firmware +1 moreTenda W15E setStaticRoute formSetStaticRoute stack-based overflow8.8 High
- python-social-auth social-app-djangosocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Medium
- xpdfOut-of-bounds array write in Xpdf 4.05 due to incorrect bounds check2.9 Low
- tenda w15e, w15e firmware +1 moreTenda W15E SetRemoteWebManage formSetRemoteWebManage stack-based overflow8.8 High
- tenda w15e, w15e firmware +1 moreTenda W15E SetPortMapping formSetPortMapping stack-based overflow8.8 High
- cisco asa, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +3 more +5 moreA vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug...6.0 Medium
- cisco asa, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +3 more +5 moreA vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA)...8.6 High
- tenda w15e, w15e firmware +1 moreTenda W15E setDebugCfg formSetDebugCfg stack-based overflow8.8 High
- tenda w15e, w15e firmware +1 moreTenda W15E formQOSRuleDel stack-based overflow8.8 High
- tenda w15e, w15e firmware +1 moreTenda W15E modifyIpMacBind formIPMacBindModify stack-based overflow8.8 High
- arm v8-m security extensions requirements on development tools, armv8-m +1 moreInsufficient argument checking in Secure state Entry functions in software using Cortex-M...6.5 Medium
pimcore/pimcorePackagistPimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-298816.1 Medium- tenda w15e, w15e firmware +1 moreTenda W15E delIpMacBind formIPMacBindDel stack-based overflow8.8 High
- boss media buddyboss theme, buddyboss dmcc theme +1 moreWordPress BuddyBoss Theme theme <= 2.4.60 - Unauth. Arbitrary WordPress Settings Change vulnerability9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3,...7.1 High
- apple ios, ipados, ios and ipados +1 more +3 moreThis issue was addressed through improved state management. This issue is fixed in iOS 17.3 and...3.3 Low
- mestres do wp checkout mestres wpWordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Account Takeover vulnerability9.8 Critical
- mongodb compassInsufficient validation of external input in Compass may enable MITM attacks7.1 High
- tenda w15e, w15e firmware +1 moreTenda W15E addIpMacBind formIPMacBindAdd stack-based overflow8.8 High
- mestres do wp checkout mestres wp, wordpress checkout mestres +1 moreWordPress Checkout Mestres WP plugin <= 7.1.9.7 - Unauthenticated Arbitrary Options Update vulnerability8.2 High
- jacques malgrange rencontre – dating site, rencontre +1 moreWordPress Rencontre plugin <= 3.10.1 - Unauthenticated Account Takeover vulnerability9.8 Critical
- Show moreLoading…