CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...5.4 Medium
- linksys e5600 firmwareLinksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the...8.0 High
- securstation cameraSection Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and...8.2 High
- emlogAn arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views...6.3 Medium
- dedecmsDedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.9.1 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_admin_profile.php in Campcodes Complete Web-Based...9.8 Critical
- campcodes complete web-based school management systemSQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based...8.1 High
- campcodes complete web-based school management systemSQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System...9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_classroom.php in campcodes Complete Web-Based School...9.8 Critical
- campcodes complete web-based school management systemSQL injection vulnerability in /model/delete_record.php in campcodes Complete Web-Based School...5.9 Medium
- campcodes complete web-based school management systemSQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web...7.3 High
- campcodes complete web-based school management systemSQL injection vulnerability in add_friends.php in campcodes Complete Web-Based School Management...8.6 High
- campcodes complete web-based school management system, school management system project management system +1 moreA SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web...8.3 High
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_events.php in campcodes Complete Web-Based School...9.8 Critical
- sourcecodester home cleaning service systemAn issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to...9.1 Critical
- roothubRoothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the...6.3 Medium
- luckyframe luckyframewebLuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the...7.5 High
- crmeb javacrmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the...5.3 Medium
- d-link dir-845l, dlink dir-845l firmware +1 moreD-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.5.3 Medium
- d-link dir-845l, dlink dir-845l firmware +1 moreD-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main...7.5 High
- dlink dir-845l firmwareD-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs...5.4 Medium
- d-link dir-845l, dlink dir-845l firmware +1 moreD-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg...9.1 Critical
- vsolcn hg323acb firmwareAn issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to...8.8 High
- yzmcmsCross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via...7.1 High
- archer platform, archerirm archer +1 moreArcher Platform 6 before 2024.03 contains a sensitive information disclosure vulnerability. An...4.3 Medium
- asus rt-ac51u firmwareCross Site Scripting (XSS) vulnerability in ASUS RT-AC51U with firmware versions up to and...6.8 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC static_route_add_ipv6.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC ip_addr_edit_commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC ip_addr_add_commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC dhcp_relay_commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC dhcp_client_commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC commit.php os command injection4.7 Medium
- fast5 prison management systemSourceCodester Prison Management System edit-photo.php unrestricted upload6.3 Medium
- tenda i21, i21 firmware +1 moreTenda i21 formexeCommand stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 formWifiMacFilterSet stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 formWifiMacFilterGet stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 setUplinkInfo formSetUplinkInfo stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 formSetAutoPing stack-based overflow8.8 High
- tenda i21, i21 firmware +1 moreTenda i21 setStaOffline formOfflineSet stack-based overflow8.8 High
crasOSS-FuzzUse-of-uninitialized-value in validate_bluetooth_device_addressNo scoreninjaOSS-FuzzUse-of-uninitialized-value in Lexer::ReadTokenNo scoreninjaOSS-FuzzUse-of-uninitialized-value in Lexer::ErrorNo scoretinyusbOSS-FuzzUse-of-uninitialized-value in cdc_taskNo scoreninjaOSS-FuzzUse-of-uninitialized-value in Lexer::ErrorNo scoreninjaOSS-FuzzUse-of-uninitialized-value in Lexer::ReadTokenNo score- nebariNebari prints temporary Keycloak root password4.8 Medium
- wordopsproject wordopsWordOps has TOCTOU race condition7.7 High
- cloudorc soliduispaces_plugin/app.py in SolidUI 0.4.0 has an unnecessary print statement for an OpenAI key. The...7.5 High
- lanol filecodeboxFileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.5.3 Medium
- Show moreLoading…