CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- huseyin berberoglu wp favorite postsWordPress WP Favorite Posts plugin <= 1.6.8 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order managerWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- thimpress thim elementor kitWordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- toidicode.com viet nam affiliateWordPress Viet Nam Affiliate plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- tech9logy creators wpcs ( wordpress custom search ), wordpress custom search +1 moreWordPress WPCS ( WordPress Custom Search ) plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- nathan vonnahme configure login timeoutWordPress Configure Login Timeout plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_events.php cross site scripting5.3 Medium
- talspotim comments evolved for wordpressWordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpsurface bloglentorWordPress BlogLentor – Blog Designer Pack for Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- trinhtuantai viet affiliate linkWordPress Viet Affiliate Link plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- phpbits forty four – 404 plugin for wordpressWordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ieplexus featured content galleryWordPress Featured Content Gallery plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- phil baylog quickiebarWordPress QuickieBar plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- benoti brozzme scroll topWordPress Brozzme Scroll Top plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- harknell awsom news announcementWordPress AWSOM News Announcement plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- orchestrated corona virus (covid-19) banner & live dataWordPress Simple Website Banner plugin <= 1.8.0.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- rashed latif tt custom post type creatorWordPress TT Custom Post Type Creator plugin <=1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wp-etracker wp etrackerWordPress WP etracker plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- betteraddons better elementor addonsWordPress Better Elementor Addons plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- skt themes addons for elementor, sktthemes skt addons for elementor +1 moreWordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bootstrapped ventures easy affiliate linksWordPress Easy Affiliate Links plugin <= 3.7.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- skt themes addons for elementor, sktthemes skt addons for elementor +1 moreWordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_friend_request.php cross site scripting5.3 Medium
- kiowareKioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which...6.2 Medium
- kiowareIn KioWare for Windows (versions all through 8.34) it is possible to exit this software and use...7.4 High
- kiowareKioWare for Windows (versions all through 8.34) allows to escape the environment by downloading...8.4 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_student_grade_subject.php cross site scripting5.3 Medium
- cemi tomasz pawełek cemiparkStoring credentials in plaintext in CemiPark5.4 Medium
- cemi tomasz pawełek cemiparkStored XSS in CemiPark6.1 Medium
- cemi tomasz pawełek cemiparkAuthentication bypass in CemiPark7.2 High
- samsung open source escargotA Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine ...5.3 Medium
- apache karaf caveApache Karaf Cave: Cave SSRF and arbitrary file access9.1 Critical
- nec platforms, ltd itk-12d-1(bk)tel, itk-12d-1p(bk)tel, itk-12dg-1p(bk)tel +41 more +43 moreNEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker...9.1 Critical
- samsung open source escargotPossible stack overflow due to a string encoding processing error5.3 Medium
- silkypress add custom css and jsAdd Custom CSS and JS <= 1.20 - Stored XSS via CSRF7.1 High
- themeqx letterpressLetterPress <= 1.2.2 - Subscriber Deletion via CSRF6.1 Medium
- markreynolds ungalleryUngallery <= 2.2.4 - Stored XSS via CSRF4.8 Medium
- pdfcrowd save as pdf plugin by pdfcrowd, save as pdf +1 moreSave as PDF < 3.2.0 - Admin+ Stored XSS4.8 Medium
- bouncycastle bc-fja, bc-java, bc c .net +2 moreBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_student_subject.php cross site scripting5.3 Medium
- tpm2 software tools, tpm2-software tpm2-tools +1 moreMissing check in tpm2_checkquote allows attackers to misrepresent the TPM state9.1 Critical
- tpm2-software tpm2-toolstpm2 does not detect if quote was not generated by TPM4.3 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- gitlabCross-Site Request Forgery (CSRF) in GitLab5.7 Medium
libavcOSS-FuzzHeap-buffer-overflow in ih264d_read_coeff4x4_cabacNo score- Show moreLoading…