CVEs published in April 2024
3,718 vulnerabilities, 293 critical, 10 exploited.
apache-commons-codecOSS-FuzzSecurity exception in java.base/java.lang.AbstractStringBuilder.<init>No scorepopplerOSS-FuzzUse-of-uninitialized-value in aesEncryptBlockNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributesNo scorepcapplusplusOSS-FuzzUNKNOWN READ in PointerVector.hNo scoreexiv2OSS-FuzzHeap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTagNo scorepcapplusplusOSS-FuzzHeap-buffer-overflow in readParsedPacketNo scorematioOSS-FuzzUNKNOWN READ in Mat_VarPrintNo scorejqOSS-FuzzUNKNOWN READ in std::__1::__POW10_SPLIT_2No score- bitcoincore bitcoin coreIn Bitcoin Core through 27.0 and Bitcoin Knots before 25.1.knots20231115, tapscript lacks a...6.3 Medium
- frroutingIn FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the...7.5 High
- onenavOneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery (SSRF) via the...6.3 Medium
- ymfe yapiA stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module...7.4 High
- mjdm majordomoCross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate...7.1 High
- mikegualtieri css exfil protectionAn issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information...7.5 High
- mikegualtieri css exfil protectionAn issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information...5.3 Medium
- novel-plusArbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to...7.5 High
- dedecmsCross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute...6.1 Medium
- bladex springbladeAn issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via...7.5 High
- tvs motor company ios, connect +1 moreAn issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote...7.5 High
- tvs motor company connectAn issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote...9.1 Critical
- webbax supernewsletterSQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote...9.8 Critical
- prestashop fmeDirectory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote...7.5 High
- shipupSQL injection vulnerability in shipup before v.3.3.0 allows a remote attacker to escalate...9.8 Critical
- prestashopAn issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote...7.5 High
- htc heroSQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to...9.8 Critical
- dokuwikiAn arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a...6.1 Medium
- thinksaasA stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS...5.4 Medium
- thinksaasA stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS...6.1 Medium
dmitryDebianDMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a...8.4 High- lsgwr spring-boot-online-examDirectory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to...8.8 High
- mikegualtieri css exfil protection, mlgualtieri css-exfil-protection +1 moreAn issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information...7.5 High
- ellite wallosWallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to ...8.1 High
- tpm2 software stack project software stack, tpm2-software tpm2-tss +1 moreFapi Verify Quote: Does not detect if quote was not generated by TPM4.3 Medium
- openstack solum-yoga-eomAn issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via...7.5 High
- recrystallize software recrystallive serverReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. The file...7.2 High
- recrystallize software serverReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie...7.5 High
- quest kace systems management applianceAn issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted...7.8 High
- quest kace systems management applianceAn issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file...7.8 High
- quest kace systems management applianceAn issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file...6.6 Medium
- trendnet tew-815dap, tew-815dap firmware +1 moreTRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An...6.4 Medium
- gog galaxyAn issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that...6.5 Medium
- gog galaxyA Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta)...6.7 Medium
- No product listedAn issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information...5.3 Medium
- foundation platform appAn issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive...7.6 High
- shenzhen project jf6000 cloud media collaboration processing platform firmwareShenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and...9.8 Critical
- vtiger crmmodules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run...8.1 High
- proquality pqprintshippinglabelsProQuality pqprintshippinglabels before v.4.15.0 is vulnerable to Directory Traversal via the...7.5 High
- No product listedMinerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows...5.9 Medium
- simplcommerceCross Site Scripting vulnerability found in Simplcommerce v...7.1 High
- ethosethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man...9.1 Critical
- Show moreLoading…