CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- jerryscriptJerryscript commit cefd391 was discovered to contain an Assertion Failure via...6.2 Medium
- inducer relateServer-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a...7.5 High
- inducer relateServer-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows...6.0 Medium
- lavalite cms, lavalite +1 moreLavalite CMS Cross Site Scripting vulnerability6.1 Medium
- cjson project cjsoncJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the...7.6 High
- 1234n minicmsCross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary...6.1 Medium
- panabit panalogAn issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v....9.8 Critical
- cmseasyDirectory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105...7.5 High
- munyweki insurance management systemAn issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate...8.1 High
- asus fan xpertAn issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an...9.8 Critical
- asus rt-n12\+ b1 firmwareCSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject...5.4 Medium
- asus rt-n12\+ b1Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to...8.4 High
- asus rt-n12\+ b1 firmwareIncorrect Access Control in Asus RT-N12+ B1 routers allows local attackers to obtain root...6.8 Medium
- asus rt-n12\+ b1Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to...6.1 Medium
- puneethreddyhc event managementSQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC...9.8 Critical
- tenda n300, n300 firmware +1 moreTenda N300 F3 router vulnerability allows users to bypass intended security policy and create...9.1 Critical
- setor informatica sistema inteligente para laboritorios \/sil\/ informatica sistema inteligente para laboritorios \/sil\/Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a...9.8 Critical
- setor silSetor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a...9.8 Critical
- ffmpegBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...7.8 High
- insyde kernelAn issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a...6.3 Medium
- jumpcloudJumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions....5.9 Medium
fdupesDebianIn deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via...6.0 Medium- dgtlmoon changedetection.ioServer Side Template Injection in Jinja2 allows Remote Command Execution10.0 Critical
- webkul uvdesk, webkul software uvdesk community +1 moreUnauthenticated Remote Code Execution in UvDesk Community10.0 Critical
- advance search project search, mndpsingh287 advanced search +1 moreWP Advanced Search <= 1.1.6 - Admin+ SQL Injection4.7 Medium
- bigbluebutton greenlightBigBlueButton Greenlight Open Redirect vulnerability9.1 Critical
- bigbluebutton greenlightBigBlueButton Greenlight Open Redirect vulnerability9.1 Critical
mdanter/eccPackagistPHPECC vulnerable to multiple cryptographic side-channel attacks9.1 Critical- zitadelZITADEL's Improper Lockout Mechanism Leads to MFA Bypass6.5 Medium
- vyperlang vypervyper performs double eval of the argument of sqrt5.3 Medium
- vyperlang vypervyper default functions don't respect nonreentrancy keys5.3 Medium
- red hat mirror registry for red hat openshiftMirror-registry: redis password stored in plain-text7.3 High
- red hat mirror registry for red hat openshiftMirror-registry: database user and password stored in plain-text7.3 High
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: default database secret key stored in plain-text on initial configuration file6.5 Medium
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: plain-text default csrf secret key8.8 High
- red hat trusted profile analyzerBzip2: compressed content bomb leads to denial of service of bombastic api4.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreRpm-ostree: world-readable /etc/shadow file6.2 Medium
- vyperlang vypervyper performs double eval of raw_args in create_from_blueprint5.3 Medium
- vyperlang vypervyper performs double eval of the slice args when buffer from adhoc locations5.3 Medium
- vyperlang vypervyper performs incorrect topic logging in raw_log5.3 Medium
- vyperlang vypervyper's range(start, start + N) reverts for negative numbers5.3 Medium
- metersphereMeteraphsere vulnerable to unauthorized viewing by workspace members5.7 Medium
- redhat openssl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)5.9 Medium
- glpi-project glpi-agent, glpi agent, gldpi-project gldpi-agent +2 moreGlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder7.3 High
- glpi-project glpi-agent, glpi agent +1 moreGLPI-Agent's MSI package installation permits local users to change Agent configuration7.3 High
- dfir-iris iris, iris-web +1 moreiris-web vulnerable to Server Side Template Injection in reports6.8 Medium
- red hat build of quarkus, build of quarkus 3.2.11.final +1 moreQuarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of service5.3 Medium
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 morePlatform: insecure websocket used when interacting with eda server8.1 High
- red hat advanced cluster management for kubernetes 2, openshift container platform 3.11, openshift container platform 4.12 +3 more +5 moreCluster-monitoring-operator: credentials leak7.7 High
- jberet, red hat build of keycloak, data grid 8 +11 more +13 moreJberet: jberet-core logging database credentials6.5 Medium
- Show moreLoading…