CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- cmseasyCmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the...7.5 High
- cmseasyCmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the...4.9 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an...6.5 Medium
- logpoint siemAn issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being...6.1 Medium
- logpoint siemAn issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while...5.3 Medium
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.4.0. Due to a lack of input validation on URLs in...9.6 Critical
- logpoint, logpoint siem +1 moreAn issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of...5.3 Medium
- data61 mp-spdz, csiro multi-protocol spdz +1 moreMP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto:...6.5 Medium
- fundanmpc mp-spdz, csiro multi-protocol spdz +1 moreMP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix:...7.5 High
- data61 mp-spdz, csiro multi-protocol spdz +1 moreMP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes...7.5 High
- data61 mp-spdz, csiro multi-protocol spdz +1 moreMP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto:...6.5 Medium
- mingsoft ms basicMS Basic Cross-site Scripting vulnerability4.1 Medium
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...9.8 Critical
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...5.3 Medium
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...9.8 Critical
- dromara j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...9.8 Critical
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...8.1 High
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...7.3 High
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...8.8 High
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...9.1 Critical
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...8.8 High
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...7.5 High
- roothubRoothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter...9.8 Critical
- roothubRoothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in...6.3 Medium
- roothubRoothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath...9.8 Critical
- hsc mailinspectorAn issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user...7.5 High
- hsc mailinspectorAn issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker...9.8 Critical
- hsc mailinspectorSQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows...4.3 Medium
- ale international alcatel-lucent ale deskphonesAn issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180...8.8 High
- alcatel-lucent ale 20, ale 20h, ale 30 +4 more +6 moreAn issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180...7.4 High
- ruvar ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the...9.4 Critical
- guangzhou luhua information technology ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id...7.8 High
- guangzhou luhua information technology ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the...8.1 High
- ruvar ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id...9.4 Critical
- guangzhou luhua information technology ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- ruvar ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the...9.4 Critical
- guangzhou luhua information technology ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- ruvar ruvaroaRuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the...9.4 Critical
- linksys ea7500, ea7500 firmware +1 moreBuffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute...9.8 Critical
- No product listedProcess Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of...4.2 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm, multiplex-labs +2 moreRace Condition Vulnerability in mintplex-labs/anything-llm6.5 Medium
- integrated control technology tsecCredential Cloning8.0 High
- hp inc. application enabling software driverA potential security vulnerability has been identified in the HP Application Enabling Software...5.7 Medium
- slicewpWordPress SliceWP Affiliates plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- glyphandcog xpdfStack overflow in Xpdf 4.05 due to object loop in PDF resources2.9 Low
- roxnor metform, wpmet metform elementor contact form builder +1 moreWordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability4.3 Medium
- ollybach wppizzaWordPress WPPizza plugin <= 3.18.10 - Broken Access Control vulnerability6.5 Medium
- michael nelson print my blogWordPress Print My Blog plugin <= 3.26.2 - Broken Access Control vulnerability5.3 Medium
- themesgrove widgetkitWordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability5.3 Medium
- supsystic digital publications by supsysticWordPress Digital Publications by Supsystic plugin <= 1.7.7 - Broken Access Control vulnerability5.3 Medium
- Show moreLoading…