CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details.php cross site scripting3.5 Low
- fast5 prison management systemSourceCodester Prison Management System changepassword.php cross site scripting5.3 Medium
- themehunk advance wordpress search plugin, advance product search, advanced wordpress search +2 moreWordPress TH Advance Product Search plugin <= 1.1.4 - Unauthenticated Plugin Settings Change vulnerability6.5 Medium
- nobita raindrops, raindrops theme +1 moreWordPress Raindrops theme <= 1.600 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- habibcoder sticky social linkWordPress Sticky Social Link plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- noor alam magical addons for elementorWordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fast5 prison management systemSourceCodester Prison Management System changepassword.php cross site scripting3.5 Low
- themesgrove widgetkitWordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- select-themes stockholm coreWordPress Stockholm Core plugin <= 2.4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- realmag777 wolf, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gomo gee search plusWordPress gee Search Plus plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- creative interactive media 3d flipbook, pdf viewer, pdf embedder – real 3d flipbook wordpress pluginWordPress Real3D Flipbook PDF Viewer Lite plugin <= 3.71 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- moveaddons move addons for elementorWordPress Move Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- goldaddons gold addons for elementorWordPress Gold Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- logichunt inc. counter upWordPress Counter Up plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- amp-mode debug infoWordPress Debug Info plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- johan van der wijk content blocks (custom post widget), vanderwijk content blocks, johan van der wijk content blocks custom post widget +2 moreWordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themeqx letterpressWordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- lunarPrivilege escalation vulnerability in Lunar7.7 High
- katie zotpressWordPress Zotpress plugin <= 7.3.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- xpro elementor addons, wpxpro xpro addons for elementor +1 moreWordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- themegrill himalayasWordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- joomunited wp latest postsWP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution5.4 Medium
- jackdewey link libraryLink Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode6.4 Medium
- themeprix fancy elementor flipboxWordPress Fancy Elementor Flipbox plugin <= 2.4.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pootlepress pootle pagebuilder – wordpress page builderWordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 for rhel 9 +1 more +3 moreEtcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform7.5 High
- wpsoul table makerWordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreEtcd: incomplete fix for cve-2021-44716 in openstack platform7.5 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +1 more +3 moreEtcd: incomplete fix for cve-2022-41723 in openstack platform7.5 High
- multi-column tag map tag map, tugbucket multi-column tag map +1 moreWordPress Multi-column Tag Map plugin <= 17.0.26 - Broken Access Control vulnerability6.5 Medium
- sslzen ssl zenSSL Zen <= 4.5.3 - Unauthenticated Private Keys Access6.5 Medium
- horearadu mesmerize companionMesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode6.4 Medium
- vmware avi load balancerVMware Avi Load Balancer updates address multiple vulnerabilities6.5 Medium
- vmware avi load balancerVMware Avi Load Balancer updates address multiple vulnerabilities7.2 High
- bestwebsoft social login, heateor social login wordpress +1 moreHeateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If...5.4 Medium
- thenbrent social connect, social connect plugin +1 moreSocial Connect <= 1.2 - Authentication Bypass9.8 Critical
- panasonic holdings corporation kw watcherKW Watcher Vulnerability ALlows Malicious Read Access to Memory4.4 Medium
- fedora dnf5daemon-serverIncomplete fix for CVE-2024-19298.8 High
- fedora dnf5daemon-server, rpm dnf5 +1 moreLocal Root Exploit via Configuration Dictionary7.5 High
- fedora dnf5daemon-server, rpm-software-management dnf5 +1 moreNo Limit on Number of Open Sessions / Bad Session Close Behaviour6.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreThe PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an...7.8 High
- octopus serverIn affected versions of Octopus Server with certain access levels it was possible to embed a...4.1 Medium
pjsipOSS-FuzzUse-of-uninitialized-value in encode_base64_differentialNo scoretrafficserverOSS-FuzzUse-of-uninitialized-value in XpackDynamicTable::_make_spaceNo scoretrafficserverOSS-FuzzUse-of-uninitialized-value in ink_filepath_mergeNo scoretrafficserverOSS-FuzzUse-of-uninitialized-value in YAML::Stream::StreamNo score- totolink ex1800t firmwareTOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter...9.8 Critical
- cherry-toto jizhicmsjizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function.6.1 Medium
- libmodbuslibmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue...7.5 High
- Show moreLoading…