CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- dedecmsDedeCMS mytag_edit.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS mytag_add.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS tpl.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS shops_delivery.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS member_type.php cross-site request forgery4.3 Medium
- impronta janto ticketing software, janto ticketing system +1 moreIDOR vulnerability in Janto Ticketing Software7.5 High
- impronta janto ticketing software, janto ticketing system +1 moreIDOR vulnerability in Janto Ticketing Software7.5 High
- socomec net visionImproper Authentication vulnerability in Socomec Net Vision6.7 Medium
- faraday gm8181, gm828x +1 moreFaraday GM8181/GM828x command_port.ini information disclosure5.3 Medium
- socomec net visionCross-Site Request Forgery vulnerability in Socomec Net Vision7.1 High
- faraday gm8181, gm828x +1 moreFaraday GM8181/GM828x Request information disclosure5.3 Medium
- faraday gm8181, gm828x +1 moreFaraday GM8181/GM828x NTP Service os command injection7.3 High
- lan messenger messenger, softros systems lan messenger +1 moreDenial of service vulnerability in LAN Messenger7.5 High
- mozilla firefox, firefox esr, thunderbird +5 more +7 morePDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF8.8 High
- clickcease click fraud protection, eranfl clickcease click fraud protection +1 moreClickCease Click Fraud Protection <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings4.3 Medium
- wshberlin startklar elementor addonsStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Deletion9.1 Critical
- wshberlin startklar elementor addonsStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Upload9.8 Critical
- bouncycastle bouncy castle for java, netapp active iq unified manager, bluexp +2 more +4 moreBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Medium
- openatom openharmonyHmdfs has a use after free vulnerability6.5 Medium
- openatom openharmonyHmdfs has a heap buffer overflow vulnerability6.5 Medium
- openatom openharmonyArkcompiler runtime has an integer overflow vulnerability3.3 Low
- openatom openharmonyBluetooth Service has a use after free vulnerability3.3 Low
- openatom openharmonyArkcompiler ets frontend has an out-of-bounds read vulnerability5.2 Medium
- openatom openharmonyMSDP has a use after free vulnerability6.5 Medium
- dwalliance easyeventEasyEvent <= 1.0.0 - Admin+ Stored XSS3.8 Low
- wisdmlabs edwiser bridge – wordpress moodle integrationEdwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value Check9.8 Critical
- silabs z-wave software development kit, silicon labs z-wave sdk +1 moreLong S0 frames received by 500 series Z-Wave devices may cause buffer overflow8.1 High
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1...2.4 Low
- samsung android, samsung mobile talkbackse +1 moreImproper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android...6.2 Medium
- samsung one ui, samsung mobile keyboard +1 moreImproper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows...4.9 Medium
- samsung galaxy storeImproper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to...5.1 Medium
- samsung internet, samsung mobile devices +1 moreImproper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows...5.5 Medium
- samsung notesImproper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to...4.4 Medium
- samsung emailImproper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows...5.5 Medium
- samsung android, samsung mobile devices +1 moreAuthentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows...5.7 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreAuthentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to...6.6 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows...5.5 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreOut of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local...6.7 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged...6.0 Medium
- samsung android, samsung mobile devices +1 moreUse after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local...6.0 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components vulnerability in TelephonyUI prior to SMR May...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows...5.5 Medium
- samsung mobile cocktailbarservice, samsung android, samsung mobile devices +2 moreImproper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in startListening of CocktailBarService prior to SMR May...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows...4.3 Medium
- samsung exynos2400, exynos 1330, exynos 1380 +1 more +3 moreA vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return...4.4 Medium
jqOSS-FuzzUNKNOWN READNo score- inclusive-design acheckerAChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php...7.5 High
- neo4jNeo4j Cypher component mishandles IMMUTABLE privileges6.5 Medium
- gnome glib, debian linux, fedoraproject fedora +7 more +9 moreAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a...5.2 Medium
- Show moreLoading…