CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- sakuraisayeki wows-karmaWOWS Karma vulnerable to a post submission bounce/timing attack6.3 Medium
- ibm urbancode deploy, devops deploy +1 moreIBM UrbanCode Deploy cross-site scripting5.4 Medium
- spacemeshos go-spacemeshPrevious ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX8.2 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System add_student_subject.php cross site scripting5.3 Medium
- syliusSylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel4.8 Medium
- froxlorFroxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise9.7 Critical
- beijing xinwang medical information technology cloud based customer service management platformSQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a...5.5 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System approve_petty_cash.php cross site scripting5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System delete_record.php cross site scripting5.3 Medium
- ni flexlogger, instrumentstudio +1 moreDeserialization of Untrusted Data Vulnerability in FlexLogger and InstrumentStudio7.8 High
- lobehub lobe-chat, lobe chat +1 morelobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability9.0 Critical
- dlink dir-619l firmwareA buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via...6.5 Medium
- d-link dir-619l firmwareA buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via...6.5 Medium
- dataeaseArbitrary File Reading in DataEase7.5 High
- dlink dir-619l firmwareA buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup...5.7 Medium
- dlink dir-619l firmwareA buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS,...6.5 Medium
tigervncRocky LinuxImportant: tigervnc security updateNo scoregolangRocky LinuxImportant: golang security updateNo scorepython-jwcryptoRocky LinuxModerate: python-jwcrypto security updateNo scorebuildahRocky LinuxModerate: buildah bug fix updateNo scorehttpdRocky LinuxModerate: httpd security updateNo score- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System delete_student_grade_subject.php cross site scripting5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System update_classroom.php cross site scripting5.3 Medium
- digisol dg-gr1321 firmware, router dg-gr1321 +1 morePassword Storage in Plaintext Vulnerability in Digisol Router5.4 Medium
- digisol dg-gr1321 firmware, router dg-gr1321 +1 moreIncorrect Access Control Vulnerability in Digisol Router6.8 Medium
- digisol dg-gr1321 firmware, router dg-gr1321 +1 morePassword Policy Bypass Vulnerability in Digisol Router9.1 Critical
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System update_exam.php cross site scripting5.3 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash5.5 Medium
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...8.8 High
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...9.8 Critical
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...9.8 Critical
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...8.8 High
- tenda fh1206 firmwareTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow...6.5 Medium
- tenda ac18, ac18 firmware +1 moreTenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via...8.2 High
- zte zxun-epdgConfiguration error Vulnerability in ZTE ZXUN-ePDG8.3 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System update_grade.php cross site scripting5.3 Medium
- elegant themes divi, divi builder, divi extra +2 moreElegant Themes Divi Theme, Extra Theme, Divi Page Builder <= 4.25.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System update_subject.php cross site scripting5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System all_teacher.php cross site scripting5.3 Medium
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution6.5 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter6.4 Medium
- apppresserWordPress AppPresser plugin <= 4.3.0 - Broken Access Control vulnerability6.5 Medium
- webinarpressWordPress Webinar plugin <= 1.33.17 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- brizy unysonWordPress Unyson plugin <=2.7.29 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- revmakx wpcal.io – easy meeting schedulerWordPress WPCal.io plugin <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- crm perks integration for pipedrive and contact form 7, wpforms, elementor, ninja formsWordPress Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- easy digital downloads digital downloads, sandhillsdev easy digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.2.11 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration5.3 Medium
- sc0ttkclark pods – custom content types and fieldsPods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL5.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Time-Based SQL Injection9.8 Critical
- Show moreLoading…