CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- aws sagemaker-python-sdkCommand Injection in sagemaker-python-sdk7.8 High
- filips123 pwasforfirefoxArbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox9.7 Critical
- tqdmtqdm CLI arguments injection attack4.8 Medium
- exclusive addons elementor, exclusiveaddons exclusive addons for elementor, tim strifler exclusive addons elementor +2 moreWordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability4.3 Medium
- bowo debug log managerWordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability4.3 Medium
- rometheme romethemekit for elementorWordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability6.5 Medium
- kama democracy pollWordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability5.3 Medium
- reviewxWordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability4.3 Medium
- smartypants sp project & document managerWordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability6.3 Medium
- adrian mörchen embed google fontsWordPress Embed Google Fonts plugin <= 3.1.0 - Broken Access Control vulnerability4.3 Medium
- wordpress directoristWordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability5.3 Medium
- ilghera jw player for wordpressWordPress JW Player for WordPress plugin <= 2.3.3 - Broken Access Control vulnerability6.5 Medium
- nico martin progressive wordpress (pwa)WordPress Progressive WordPress (PWA) plugin <= 2.1.13 - Broken Access Control vulnerability4.3 Medium
- merative merge dicom toolkit c/c++, merge dicom toolkit c c\+\+ +1 moreUse of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows....5.7 Medium
- merative merge dicom toolkit c/c++Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows. When...4.0 Medium
- merative merge dicom toolkit c/c++, merge dicom toolkit c c\+\+ +1 moreOut-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_File()...4.0 Medium
- apache hiveApache Hive: Arbitrary command execution via JDBC driver6.6 Medium
- solarwinds serv-uArbitrary File Overwrite Vulnerability5.7 Medium
- slickremix feed them socialWordPress Feed Them Social plugin <= 4.2.0 - Broken Access Control vulnerability4.3 Medium
- shortpixel critical cssWordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability7.6 High
- richteam slider carousel – responsive image sliderWordPress Slider Carousel – Responsive Image Slider plugin <=1.5.1 - Broken Access Control vulnerability5.3 Medium
- brizy unysonWordPress Unyson plugin <= 2.7.28 - Broken Access Control vulnerability4.3 Medium
- avirtum ipanorama 360 wordpress virtual tour builder, ipanorama 360 wordpress virtual tour builder project 360 wordpress virtual tour builder +1 moreWordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability5.3 Medium
- lorna timbah (webgrrrl) accessibility widgetWordPress Accessibility Widget plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- machothemes cpo companionWordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kaminskym ajax login and registration modal popup + inline formWordPress AJAX Login and Registration modal popup + inline form plugin <= 2.23 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- realtyna organic idx pluginWordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- karl kiesinger gwp-histatsWordPress GWP-Histats plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- team giphy giphypressWordPress Giphypress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- codebard codebard's patron button and widgets for patreon, codebard\'s patron button and widgets for patreon +1 moreWordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- vinod dalvi login logout register menuWordPress Login Logout Register Menu plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- kailey lampert mini loopsWordPress Mini Loops plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pascal bajorat pb mailcryptWordPress PB MailCrypt plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- baden03 print-o-maticWordPress Print-O-Matic plugin <= 2.1.10 - Auth. Cross Site Scripting (XSS) vulnerability6.5 Medium
- ashan jay eventonWordPress EventON plugin <= 2.2.14 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- happykite ultimate under constructionWordPress Ultimate Under Construction plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- solverwp.com eleblog – elementor blog and magazine addonsWordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpify woo czechWordPress WPify Woo Czech plugin <= 4.0.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- majeedraza carousel sliderCarousel Slider < 2.2.10 - Editor+ Stored XSS4.7 Medium
- jegstudio gutenverseGutenverse < 1.9.1 - Contributor+ Stored XSS6.1 Medium
- unknown responsive contact form builder & lead generation plugin, themehunk contact form \& lead form elementor builder +1 moreResponsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Admin+ Stored XSS6.1 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +3 more +5 moreLibvirt: stack use-after-free in virnetclientioeventloop()6.2 Medium
- wordpressWordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar...7.2 High
- qnap media streaming add-onMedia Streaming add-on6.6 Medium
- centreon, centreon web +1 moreCentreon sysName Cross-Site Scripting Remote Code Execution Vulnerability7.5 High
- d-link dcs-8300lhv2, dlink dcs-8300lhv2 firmware +1 moreD-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability6.3 Medium
- d-link dcs-8300lhv2, dlink dcs-8300lhv2 firmware, dcs-8300lvh2 firmware +2 moreD-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- d-link dcs-8300lhv2, dlink dcs-8300lhv2 firmware, dcs-8300lvh2 firmware +2 moreD-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- d-link dcs-8300lhv2, dlink dcs-8300lhv2 firmware, dcs-8300lvh2 firmware +2 moreD-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- Show moreLoading…