CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
glib2.0Debianglib2.0 - regression updateNo score- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS...6.5 Medium
- artifex ghostscriptAn issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows...8.8 High
- artifex ghostscriptAn issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a...6.3 Medium
- artifex ghostscriptAn issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command...5.3 Medium
- bouncycastle legion-of-the-bouncy-castle-java-crytography-apiBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 High
- artifex ghostscriptArtifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format...6.3 Medium
- apple itunes, itunes for windows +1 moreThe issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows....7.8 High
- totolink a3002ru-v3 firmwareTotolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is...8.8 High
- rems school task managerSQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain...9.1 Critical
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password...8.8 High
- cyclonedx cyclonedx-javascript-library@cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability8.1 High
- No product listedA crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09.4.3 Medium
- dell data manager appliance software (dmas), dm5500 firmware, powerprotect data manager dm5500 firmware +2 moreDell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization...2.2 Low
- dell dm5500, data manager appliance software (dmas), dm5500 firmware +2 moreDell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path...6.5 Medium
- dell update manager plugin, openmanage enterprise update manager +1 moreDell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage...3.5 Low
- go toolchain cmd/go, golang go +1 moreArbitrary code execution during build on Darwin in cmd/go6.4 Medium
- apache inlongApache Inlong JDBC Vulnerability9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP TMM tenants on VELOS and rSeries vulnerability6.5 Medium
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerability6.8 Medium
- f5 big-ip next central managerBIG-IP Central Manager SQL Injection7.5 High
- f5 big-ip next central managerBIG-IP Central Manager OData Injection Vulnerability7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility XSS vulnerability6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility XSS vulnerability8.0 High
- f5 big-ip next cnf, big-ip next cloud-native network functions +1 moreBIG-IP NEXT CNF vulnerability4.4 Medium
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerability7.4 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP SSL vulnerability5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP TMUI XSS vulnerability4.7 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP IPsec vulnerability7.5 High
- f5 big-ip, big-ip next cnf, big-ip access policy manager +21 more +23 moreTMM Vulnerability7.5 High
- f5 big-ip, apm clients, big-ip edge client +2 more +4 moreBIG-IP APM browser network access VPN client vulnerability7.4 High
- bluenet technology clinical browsing systemBlueNet Technology Clinical Browsing System cloudInterface.php sql injection6.3 Medium
- apache ofbizApache OFBiz: Path traversal leading to RCE9.8 Critical
- ptc codebeamerCross-site Scripting in PTC Codebeamer7.1 High
- fermyon spinSpin contains a potential network sandbox escape for specifically configured Spin applications9.1 Critical
- bluenet technology clinical browsing systemBlueNet Technology Clinical Browsing System outIndex.php sql injection6.3 Medium
- vitessio vitessVitess vulnerable to infinite memory consumption and vtgate crash4.9 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_teacher2.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_attendance_history1.php cross site scripting3.5 Low
- eprolo dropshipping, paulepro2019 eprolo dropshipping +1 moreWordPress EPROLO Dropshipping plugin <= 1.7.1 - Broken Access Control vulnerability4.3 Medium
- appsbd viteposWordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerability4.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_due_payment.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_exam_mark_insert_form1.php cross site scripting3.5 Low
- happymonster happy addons for elementorWordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability4.3 Medium
- contact form - repute infosystems arforms form builderWordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerability7.6 High
- aipost ai wp writerWordPress AI WP Writer plugin <= 3.6.5 - Broken Access Control vulnerability5.3 Medium
- tyche softwares arconix faq, arconix shortcodes, print invoice & delivery notes for woocommerce +2 moreBroken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares4.3 Medium
- pressforce rolo sliderWordPress Rolo Slider plugin <= 1.0.9 - Broken Access Control vulnerability7.7 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_exam_mark_update_form.php cross site scripting3.5 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_first_payment.php cross site scripting3.5 Low
- Show moreLoading…