CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- No product listedThe O-RAN E2T I-Release buildPrometheusList function can have a NULL pointer dereference because...5.3 Medium
- linuxfoundation ric-app-kpimon-go, o-ran ricapp kpimon go +1 moreO-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message.5.3 Medium
- hcodeA stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.6.5 Medium
- morethanwords twebIn Telegram WebK before 2.0.0 (488), a crafted Mini Web App allows XSS via the postMessage...4.6 Medium
- hyprlandIn plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition,...7.0 High
- carla ubuntuIn CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians...5.9 Medium
- pdfmyurlAn SSRF issue in the PDFMyURL service allows a remote attacker to obtain sensitive information...9.8 Critical
- hisiphpAn issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted...9.8 Critical
- onethinkSQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via...9.8 Critical
- onethinkAn issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted...7.1 High
- cubecartFile Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute...8.0 High
- guangzhou yingshi electronic technology ncast yingshiInsecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi...9.8 Critical
- dedecmsCross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary...4.4 Medium
- taocmsDirectory Traversal vulnerability in TaoCMS v.3.0.2 allows a remote attacker to execute arbitrary...9.8 Critical
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function...6.5 Medium
- jizhicmsCross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain...7.3 High
- prestashopSQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a...9.8 Critical
- prestashopSQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an...6.8 Medium
- prestashop fmeAn issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive...7.5 High
- communitydeveloper prestaddons flashsalesSQL Injection vulnerability in Prestaddons flashsales 1.9.7 and before allows an attacker to run...9.8 Critical
- prestashopmodules mdgiftproductSQL Injection vulnerability in Digincube mdgiftproduct before 1.4.1 allows an attacker to run...9.8 Critical
- helloshop deliveryorderautoupdateSQL Injection vulnerability in Helloshop deliveryorderautoupdate v.2.8.1 and before allows an...9.8 Critical
- znuny lts, znuny +1 moreAn issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a...8.8 High
- znunyAn issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the...7.1 High
- znunyAn issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0...9.8 Critical
- yonganda yad-loj firmwareAn issue in Yonganda YAD-LOJ V3.0.561 allows a remote attacker to cause a denial of service via a...7.5 High
- No product listedAn issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service...3.3 Low
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapAn issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da...9.8 Critical
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrap, ecommerce codeigniter bootstrap project codeigniter bootstrap +1 moreAn issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da...9.8 Critical
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapSQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v....8.0 High
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrap, ecommerce codeigniter bootstrap project codeigniter bootstrap +1 moreAn issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da...9.8 Critical
- nexsys-oneDirectory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to...7.5 High
- yealink vp59 firmwareAn issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 (fixed in 122.15.0.142)...2.1 Low
- glpi-project glpiAn issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary...9.8 Critical
- flowiseai flowiseFlowise vulnerable to code injection via api/v17.6 High
- hospital management system project management system, mayurik hospital management system +1 moreInsecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows...7.6 High
- limbasLimbas up to v5.2.14 was discovered to contain a SQL injection vulnerability via the ftid parameter.6.5 Medium
- superantispyware professional xAn issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers...7.8 High
- beekeeperstudio beekeeper-studioCross Site Scripting (XSS) in Beekeeper Studio 4.1.13 and earlier allows remote attackers to...6.1 Medium
- linuxfoundation onos-lib-goOpen Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition...5.5 Medium
- linuxfoundation onos-lib-goOpen Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition...8.1 High
- linuxfoundation onos-ric-sdk-go, onosproject onos +1 moreOpen Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the...6.5 Medium
- linuxfoundation onos-kpimon, open networking foundation sd-ran onos +1 moreOpen Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel...6.5 Medium
- linuxfoundation onos-kpimonOpen Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the...8.1 High
- kde libksieveIn KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server...7.1 High
- ieisystem uefi firmwareIEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use...7.7 High
- oracle ens sql managerEMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the...4.2 Medium
- jfinalcms project jfinalcmsCross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute...6.1 Medium
- emdns emdns.cemdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be ...9.8 Critical
- No product listedmarshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause...6.5 Medium
- Show moreLoading…