CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- phpgurukul doctor appointment management systemPHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection6.3 Medium
- phpgurukul doctor appointment management systemPHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php cross site scripting3.5 Low
- contemporary control system basrouter bacnet basrt-bContemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service denial of service6.5 Medium
- tenda a301, a301 firmware, ac15 +2 moreTenda A301 setBlackRule formAddMacfilterRule stack-based overflow8.8 High
- bluenet technology clinical browsing systemBlueNet Technology Clinical Browsing System deleteStudy.php sql injection6.3 Medium
- savsofts savsoft quizTechkshetra Info Solutions Savsoft Quiz Category Page editCategory cross site scripting2.4 Low
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC gre_edit_commit.php os command injection4.7 Medium
- tenda i22, i22 firmware +1 moreTenda i22 formSetUrlFilterRule stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 DhcpSetSe fromDhcpSetSer stack-based overflow8.8 High
- ibm mq applianceIBM MQ code execution7.5 High
- tenda i21, i21 firmware +1 moreTenda i21 wifiSSIDset formwrlSSIDset stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 wifiSSIDget formwrlSSIDget stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 formQosManage_user stack-based overflow8.8 High
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget6.4 Medium
- tenda i21, i21 firmware +1 moreTenda i21 formQosManage_auto stack-based overflow8.8 High
- cyanomiko dcnnt-pycyanomiko dcnnt-py Notification notifications.py main command injection6.3 Medium
- jetmonsters timetable and event schedule by motopressTimetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection9.9 Critical
- tenda i21, i21 firmware +1 moreTenda i21 formQosManageDouble_auto stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 formQosManageDouble_user stack-based overflow8.8 High
rubyAlmaLinux,jrubyUbuntu,ruby2.3Ubuntu +80 more +82 moreAn issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the...6.6 Medium- willmot backupwordpressBackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal2.7 Low
- wpclever wpc composite products for woocommerce, wpc product bundles for woocommerce +1 moreWPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker, wordpress form maker by 10web +2 moreForm Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting4.4 Medium
- brocade sannav, broadcom brocade sannav +1 moreBy default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)6.8 Medium
mdanter/eccPackagist,paragonie/eccPackagist +1 moremdanter/ecc affected by timing vulnerability in cryptographic side-channels4.3 Medium- artifex ghostscriptAn issue was discovered in Artifex Ghostscript through 10.01.0. psi/zmisc1.c, when SAFER mode is...5.5 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file...7.7 High
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search...8.4 High
- tenda w9, w9 firmware +1 moreTenda W9 DhcpSetSer fromDhcpSetSer stack-based overflow8.8 High
- tenda w9, w9 firmware +1 moreTenda W9 wifiSSIDset formwrlSSIDset stack-based overflow8.8 High
- silabs.com z/ip gateway sdkZ/IP Gateway S2 Nonce Get Denial of Service Vulnerability7.5 High
- silabs z\/ip gateway sdk, silabs.com z/ip gateway sdk +1 moreZ/IP Gateway Device Reset Locally Denial of Service Vulnerability7.5 High
- mcu-tools mcubootMCUboot Injection attack of unprotected TLV values7.7 High
- sidekiqReflected XSS in sidekiq5.5 Medium
- tenda w9, w9 firmware +1 moreTenda W9 wifiSSIDget formwrlSSIDget stack-based overflow8.8 High
- tenda w9, w9 firmware +1 moreTenda W9 formQosManageDouble_auto stack-based overflow8.8 High
- danswer-ai danswerUnauthorized access to GET/SET of Slack Bot Tokens in Danswer9.8 Critical
- ggerganov llama.cppUse of Uninitialized Variable Vulnerability in llama.cpp7.1 High
- tenda w9, w9 firmware +1 moreTenda W9 formQosManageDouble_user stack-based overflow8.8 High
- tenda ax1806, ax1806 firmware +1 moreTenda AX1806 SetRebootTimer formSetRebootTimer stack-based overflow8.8 High
- tenda ax1806, ax1806 firmware +1 moreTenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflow8.8 High
- apple itunes, itunes for windows +1 moreA logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for...7.8 High
- tenda ax1806, ax1806 firmware +1 moreTenda AX1806 execCommand R7WebsSecurityHandler stack-based overflow8.8 High
- tenda ax1803, ax1803 firmware +1 moreTenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflow8.8 High
- netgear dg834gv5, dg834gv5 firmware +1 moreNetgear DG834Gv5 Web Management Interface cleartext storage2.7 Low
- sap enable now manager, sap se enable now +1 moreMissing authorization check in SAP Enable Now Manager6.5 Medium
- claris filemaker serverClaris International has resolved an issue of potentially allowing unauthorized access to records...7.5 High
- claris filemaker serverClaris International has successfully resolved an issue of potentially exposing password...4.9 Medium
- argoproj argo cd, argo-cd +1 moreDenial of Service via malicious jqPathExpressions in ignoreDifferences6.5 Medium
- qnap qufirewallQuFirewall4.1 Medium
- Show moreLoading…