CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader, phantompdf +2 moreFoxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor, phantompdf +2 moreFoxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Square Annotation Use-After-Free Remote Code Execution Vulnerability7.8 High
- netgear r7800, d7800 firmware, ex2700 firmware +39 more +41 moreNETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability8.8 High
- go standard library netMalformed DNS message can cause infinite loop in net5.9 Medium
- hcl software bigfix complianceHCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint6.5 Medium
- ibm watson cp4d data storesIBM Watson CP4D Data Stores information disclosure6.2 Medium
- python cpythontempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 High
- denoDeno contains a permission escalation via open of privileged files with missing `--deny` flag8.5 High
- ibm aix, vios +1 moreIBM AIX privilege escalation8.1 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote...6.5 Medium
- google chrome, apple ipados, iphone os +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to...9.6 Critical
- knowbe4 phish alert button (pab) f, phish alert button (pab) for outlook, phish alert button +3 more +5 moreA local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for...2.8 Low
- knowbe4 phish alert button (pab) for outlook, second chance client, passwordiq (piq) client +2 moreA medium severity vulnerability has been identified in the update mechanism of the Phish Alert...6.0 Medium
- ubiquiti unifi connect display, unifi connect display cast, unifi connect ev station +5 more +7 moreAn Unverified Password Change could allow a malicious actor with API access to the device to...2.2 Low
- ubiquiti unifi connect application, unifi connect display, unifi connect display cast +2 more +4 moreAn Improper Certificate Validation could allow a malicious actor with access to an adjacent...7.5 High
- ubiquiti unifi access g2 reader pro, unifi access intercom, unifi access intercom viewer +5 more +7 moreAn Improper Access Control could allow a malicious actor authenticated in the API to enable...2.2 Low
- kimaiKimai Session information disclosure3.7 Low
- basecamp trixThe Trix Editor Contains an Arbitrary Code Execution Vulnerability5.4 Medium
- oisf suricataSuricata's defrag contains various issues leading to policy bypass5.3 Medium
- sem-cms semcmsSEMCMS function.php locate sql injection6.3 Medium
- oisf suricataSuricata's base64 contains an out of bounds write5.3 Medium
- oisf suricataSuricata 's http2 parser contains an improper compressed header handling can lead to resource starvation7.5 High
- dedecmsDedeCMS sys_safe.php cross-site request forgery4.3 Medium
- wojtekmaj react-pdf, pdf.js viewer project viewer +1 morereact-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF7.1 High
- glpi-project glpiGLPI contains an authenticated SQL injection7.7 High
- glpi-project glpiGLPI contains an SQL injection through the saved searches7.1 High
- dedecmsDedeCMS sys_multiserv.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS sys_group_edit.php cross-site request forgery4.3 Medium
- apache supersetApache Superset: Incorrect datasource authorization on explore REST API4.3 Medium
- dedecmsDedeCMS sys_group_add.php cross-site request forgery4.3 Medium
- dedecmsDedeCMS sys_info.php cross-site request forgery4.3 Medium
- eclipse edc connector, eclipse foundation edc +1 moreEclipse EDC: OAuth2 Credential Exfiltration Vulnerability6.8 Medium
- opentext netiq identity consoleBroken Access Control leading to SSRF in NetIQ Identity Console5.8 Medium
- mindersec minderMinder's Github Webhook Handler vulnerable to denial of service from un-validated requests7.5 High
- tilda publishing publishingWordPress Tilda Publishing plugin <= 0.3.23 - Broken Access Control vulnerability6.3 Medium
- Show moreLoading…