CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
- No product listedHiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which...5.7 Medium
- stupidthings.net simpleminingosSimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which...9.1 Critical
- fullzero nvocnvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in...9.8 Critical
- easymineeasyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which...5.6 Medium
- tigera calico, calico cloud, calico enterprise +2 morePrivilege escalation in Calico CNI install binary6.7 Medium
- grandstream ucm series, ucm6202 firmware, ucm6204 firmware +2 more +4 moreGrandstream UCM Series IP PBX HTTP Parameter Injection8.8 High
- acronis cyber protect cloud agentLocal privilege escalation due to insecure folder permissions. The following products are...6.8 Medium
- acronis cyber protect 16, cyber protect cloud agent, true image +1 more +3 moreLocal privilege escalation due to unquoted search path vulnerability. The following products are...8.2 High
- acronis cyber protect 17, cyber protect cloud agent +1 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.1 High
- acronis cyber protect 16, cyber protect cloud agent +1 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.1 High
- secomea gatemanagerHeap buffer overflow8.2 High
- secomea gatemanagerInsufficient seeding of random number generator8.1 High
- r-project rDeserialization of untrusted data can occur in the R statistical programming language, on any...8.8 High
- tyche softwares payment gateway based fees and discounts for woocommerceWordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerability4.3 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerability5.3 Medium
- ays-pro secure copy content protection and content lockingWordPress Secure Copy Content Protection and Content Locking plugin <= 3.9.0 - Broken Access Control vulnerability5.3 Medium
- basepress knowledge base documentation & wiki plugin – basepressWordPress basepress plugin <= 2.16.1 - Broken Access Control vulnerability5.4 Medium
- ofofonobs hubbankCross-site Scripting (XSS) vulnerability in HubBank6.3 Medium
- ofofonobs hubbankSQL injection vulnerability in HubBank8.1 High
- ofofonobs hubbankSQL injection vulnerability in HubBank8.1 High
- ofofonobs hubbankSQL injection vulnerability in HubBank8.1 High
- ofofonobs hubbankUnrestricted Upload of File with Dangerous Type vulnerability in HubBank9.9 Critical
- gt3 soluciones swal, huawei gt3 +1 moreVulnerability on SWAL platform from GT3 Soluciones5.4 Medium
- kb support support, logon kb support +1 moreWordPress KB Support plugin <= 1.6.0 - Broken Access Control vulnerability6.5 Medium
- basepress knowledge base documentation & wiki plugin – basepressWordPress basepress plugin <= 2.16.1 - Server Side Request Forgery (SSRF) vulnerability5.0 Medium
- tips and tricks hq easy accept payments, all in one wordpress security and firewall +1 moreWordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability7.5 High
- rednao smart formsWordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability4.3 Medium
- leaky paywall paywall, zeen101 leaky paywall +1 moreWordPress Leaky Paywall plugin <= 4.20.8 - Price Manipulation vulnerability7.5 High
- jewel theme master addons for elementor, master-addons master addons +1 moreWordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerability4.3 Medium
- havelsan dialogueBroken Access Control in Havelsan's Dialogue9.4 Critical
- five star plugins star restaurant reservations, fivestarplugins five star restaurant reservations +1 moreWordPress Five Star Restaurant Reservations plugin <= 2.6.16 - Broken Access Control vulnerability5.3 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure...6.3 Medium
- profaceoff ssuWordPress SSU plugin <= 1.5.0 - Broken Access Control vulnerability7.5 High
- piotnet addons for elementor pro, addons for elementor +1 moreWordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability7.5 High
- mahesh vora wp page post widget cloneWordPress WP Page Post Widget Clone plugin <= 1.0.1 - Broken Access Control vulnerability5.4 Medium
- pdfcrowd save as pdf plugin by pdfcrowd, save as pdf +1 moreWordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability6.5 Medium
- 8theme xstore coreWordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability6.5 Medium
- real big plugins client dashWordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerability5.3 Medium
- n-media orderconvoWordPress OrderConvo plugin <= 12.4 - Unauthenticated API Access to Arbitrary File Upload vulnerability10.0 Critical
- fastline media llc assistant – every day productivity apps, fastlinemedia assistant +1 moreWordPress Assistant – Every Day Productivity Apps plugin <= 1.4.9.1 - Sensitive Data Exposure vulnerability5.3 Medium
- khaled user meta, user meta meta, usermeta user meta user profile builder and user management +2 moreWordPress User Meta plugin <= 3.0 - Sensitive Data Exposure vulnerability5.3 Medium
- solid plugins affiliateWordPress Solid Affiliate plugin <= 1.9.1 - Sensitive Data Exposure via Log File vulnerability7.5 High
- piotnet addons for elementor pro, forms +1 moreWordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- creative motion auto featured image (auto post thumbnail)WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- cusmin absolutely glamorous custom adminWordPress AGCA – Custom Dashboard & Login Page plugin <= 7.2.2 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- deepen bajracharya video conferencing with zoomWordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerability4.7 Medium
- 8theme xstore coreWordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability9.0 Critical
- team yoast custom field finderWordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerability5.4 Medium
- mailcleanerMailCleaner SOAP Service dumpConfiguration os command injection6.7 Medium
- mailcleanerMailCleaner Admin Endpoints path traversal4.7 Medium
- Show moreLoading…