CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- open-xchange app suite, open-xchange gmbh ox app suite +1 moreMaliciously crafted E-Mail attachment names could be used to temporarily execute script code in...6.5 Medium
- open-xchange ox app suiteContent-ID based embedding of resources in E-Mails could be abused to trigger client-side script...6.5 Medium
- open-xchange ox app suiteE-Mail containing malicious display-name information could trigger client-side script execution...6.5 Medium
- fast5 prison management systemSourceCodester Prison Management System user-record.php cross site scripting2.4 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details2.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details3.php cross site scripting3.5 Low
- mf gig calendar project gig calendar, unknown mf gig calendar +1 moreMF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF7.5 High
- mf gig calendar project gig calendar, unknown mf gig calendar +1 moreMF Gig Calendar <= 1.2.1 - Editor+ Stored XSS5.4 Medium
- crelly slider project slider, unknown crelly slider +1 moreCrelly Slider <= 1.4.5 - Admin+ Stored XSS5.4 Medium
- radykal fancy product designerFancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting5.9 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details4.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_invoice.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_attendance_history1.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_details.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_details2.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_details3.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_invoice.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_invoice1.php cross site scripting3.5 Low
- google android, mediatek mt6768, mt6781 +40 more +42 moreIn atf spm, there is a possible way to remap physical memory to virtual memory due to a logic...6.7 Medium
- google android, mediatek mt6580, mt6761 +27 more +29 moreIn wlan service, there is a possible out of bounds write due to improper input validation. This...7.8 High
- google android, mediatek mt6580, mt6739 +23 more +25 moreIn da, there is a possible escalation of privilege due to an incorrect status check. This could...5.9 Medium
- google android, mediatek mt6580, mt6739 +23 more +25 moreIn da, there is a possible escalation of privilege due to an incorrect status check. This could...6.7 Medium
- google android, mediatek mt6765, mt6768 +24 more +26 moreIn keyInstall, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable_grade_wise.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable_insert_form.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable_update_form.php cross site scripting3.5 Low
- fast5 prison management systemSourceCodester Prison Management System edit-profile.php cross site scripting3.5 Low
- shanghai sunfull automation bacnet server hmi1002-armShanghai Sunfull Automation BACnet Server HMI1002-ARM Message buffer overflow6.3 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +26 more +28 moreRuijie RG-UAC arp_add_commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +26 more +28 moreRuijie RG-UAC add_commit.php os command injection4.7 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC static_route_edit_ipv6.php os command injection4.7 Medium
- mateso passwordsafeMateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.7.5 High
- odooA SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka...7.3 High
- odooA SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module (aka...7.3 High
- query deluxe deluxeA SQL injection vulnerability in Yvan Dotet PostgreSQL Query Deluxe module (aka query_deluxe) 17...9.8 Critical
- hsc mailinspectorAn issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind...5.5 Medium
- hsc mailinspectorAn issue was discovered in HSC Mailinspector 5.2.17-3. A Path Traversal vulnerability (resulting...5.4 Medium
- hsc mailinspectorAn issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path...8.6 High
- wasm3 project wasm3pywasm3 contains a global buffer overflow which leads to segmentation fault7.5 High
- bytecodealliance wasm micro runtime, webassembly micro runtime +1 moreAn out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime...7.5 High
- bytecodealliance wasm micro runtime, webassembly micro runtime +1 moreA heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0...6.2 Medium
- wasm3 project wasm3pywasm3 contains a heap buffer overflow which leads to segmentation fault9.8 Critical
- wasm3 project wasm3wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation...7.5 High
- archerirm archerAn issue was discovered in Archer Platform 6 before 2024.03. There is an X-Forwarded-For Header...5.3 Medium
- archerirm archerAn issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled...8.8 High
- archer platform, archerirm archer +1 moreAn issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site...7.3 High
- archerirm archerAn issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site...7.3 High
- archer platform, archerirm archer +1 moreAn issue was discovered in Archer Platform 6 before 2024.04. There is a stored cross-site...7.3 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.1 High
- Show moreLoading…