CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- totolink cp450 firmwareTOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow...8.8 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption...5.7 Medium
- totolink cp450 firmwareTOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow...7.7 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the...9.8 Critical
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption...7.4 High
- totolink cp450, cp450 firmware +1 moreTOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow...7.3 High
- hdfgroup hdf5HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the...8.8 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the...9.8 Critical
- hdfgroup hdf5HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the...7.4 High
- hdfgroup hdf5HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of...9.8 Critical
- vercel next.jsNext.js Server-Side Request Forgery in Server Actions7.5 High
- vercel next.jsNext.js Vulnerable to HTTP Request Smuggling7.5 High
- espressif esp-idfBuffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code...6.5 Medium
- cyberpower powerpanel enterprise, powerpanel +1 moreCyberPower PowerPanel Enterprise SQL Injection7.5 High
- cyberpower powerpanel enterprise, powerpanel +1 moreCyberPower PowerPanel Enterprise SQL Injection7.5 High
- cyberpower powerpanel enterprise, powerpanel +1 moreCyberPower PowerPanel Enterprise SQL Injection7.5 High
- cyberpower powerpanel enterprise, powerpanel +1 moreCyberPower PowerPanel Enterprise SQL Injection7.5 High
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid type8.3 High
- cyberpower powerpanel enterprise, powerpanel +1 moreCyberPower PowerPanel Enterprise Missing Authentication9.8 Critical
- critical moments cmsaasstarterCMSaasStarter: JWT Token Not Verified on Server Session6.5 Medium
- 1panel-dev 1panelArbitrary file write vulnerability in 1Panel6.5 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System find_friends.php cross site scripting5.3 Medium
- npgsqlNpgsql Vulnerable to SQL Injection via Protocol Message Size Overflow8.1 High
- elated-themes frappeFrappe vuilnerable to an open redirect on login page6.1 Medium
- totolink outdoor cpe cp450, cp450 firmware +1 moreTOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection...7.3 High
- totolink cp450 firmwareTOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password...8.8 High
- blakeblackshear frigateIn Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service6.8 Medium
- totolink cp450, cp450 firmware +1 moreTOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow...7.3 High
- totolink cp450 firmwareTOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the...8.6 High
- emptoolkit emp-otBuffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary...6.2 Medium
- totolink cp450, cp450 firmware +1 moreTOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection...3.8 Low
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System my_student_exam_marks1.php cross site scripting5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System range_grade_text.php cross site scripting5.3 Medium
- postgresqlPostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checks3.1 Low
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability8.6 High
- solarwinds access rights managerSolarWinds ARM Deserialization of Untrusted Data Remote Code Execution9.0 Critical
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability7.5 High
- wpdeveloper schedulepressWordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability6.5 Medium
- wp club manager club managerWordPress WP Club Manager plugin <= 2.2.11 - Broken Access Control vulnerability5.3 Medium
- woo product importer sharkdropship dropshipping for aliexpress, ebay, amazon, etsyWordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability7.5 High
- automattic wp job managerWordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability5.3 Medium
- alexacrm dynamics 365 integrationWordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability5.3 Medium
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order manager, ukrsolution barcode scanner and inventory manager +1 moreWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability5.3 Medium
- ghostWordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability7.5 High
- ocdi one click demo importWordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability4.4 Medium
- bdthemes ultimate store kit elementor addons, utlimate store kit elementor addons +1 moreWordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability5.4 Medium
- divspot ds site messageWordPress DS Site Message plugin <= 1.14.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- Show moreLoading…