CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- huawei emui, harmonyos +1 moreDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this...4.7 Medium
- huawei emui, harmonyos +1 moreDouble-free vulnerability in the RSMC module Impact: Successful exploitation of this...4.7 Medium
- huawei emui, harmonyos +1 moreInsufficient verification vulnerability in the baseband module Impact: Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 morePermission verification vulnerability in the wpa_supplicant module Impact: Successful...7.5 High
- huawei emui, harmonyos +1 morePermission verification vulnerability in the system sharing pop-up module Impact: Successful...6.1 Medium
- huawei emui, harmonyos +1 moreInsufficient verification vulnerability in the system sharing pop-up module Impact: Successful...3.3 Low
- creativethemes blocksy companionBlocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads6.4 Medium
- thimpress thim kit for elementor – pre-built templates & widgets for elementorThim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- kognetiks chatbot for wordpress, kognetiks .com chatbot +1 moreKognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function9.8 Critical
- brainstormforce starter templates, starter templates – ai-powered templates for elementor & gutenberg +1 moreStarter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- synaptics fingerprint driverUse-After-Free in Service for Hardware Support App for Fingerprint Driver5.5 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer6.4 Medium
glslangOSS-FuzzUNKNOWN READ in glslang::TInfoSinkBase::locationNo score- iqonicdesign graphina – charts and graphs for elementorGraphina – Elementor Charts and Graphs <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- unitecms unlimited elements for elementor, unlimited-elements unlimited elements for elementor \(free widgets\, addons\, templates\) +1 moreUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection8.8 High
- fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 moreBeaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute6.4 Medium
- faboba falang multilanguage for wordpressFalang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- jetmonsters hotel booking lite, motopress hotel booking +1 moreHotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection9.8 Critical
- levelfourstorefront shopping cart & ecommerce store, shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System vendor cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System tax cross site scripting5.3 Medium
- hp inc. plantronics hub, hp poly plantronics hub +1 moreA privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.6.7 Medium
- campcodes legal case management systemCampcodes Legal Case Management System tasks cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System service cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System role cross site scripting5.3 Medium
- octo-sts appocto-sts allows unauthenticated attackers to cause unbounded CPU and memory usage3.7 Low
- campcodes legal case management systemCampcodes Legal Case Management System judge cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System expense-type cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System court cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System court-type cross site scripting5.3 Medium
- ibm txseries for multiplatforms, txseries for multiplatform +1 moreIBM TXSeries for Multiplatforms information disclosure6.2 Medium
- ibm txseries for multiplatforms, txseries for multiplatform +1 moreIBM TXSeries for Multiplatforms information disclosure6.1 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- campcodes legal case management systemCampcodes Legal Case Management System clients cross site scripting5.3 Medium
- ibm txseries for multiplatforms, txseries for multiplatform +1 moreIBM TXSeries for Multiplatforms information disclosure4.0 Medium
- bjjfsd jin fang times content management systemJin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection...8.8 High
- ibm sdk, java technology edition, java software development kit +1 moreIBM SDK, Java Technology Edition denial of service5.9 Medium
- hcl software dryice lucy, hcltech dryice aex +1 moreHCL DRYiCE Lucy v9 (now AEX) is affected by a Cross Origin Resource Sharing (CORS) Vulnerability6.5 Medium
- abetlen llama-cpp-pythonllama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata9.7 Critical
- globitel speechlogGlobitel KSA SpeechLog v8.1 was discovered to contain a stored cross-site scripting (XSS)...4.6 Medium
- campcodes legal case management systemCampcodes Legal Case Management System client_user cross site scripting5.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure6.8 Medium
- globitel speechlogGlobitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR)...7.5 High
- campcodes legal case management systemCampcodes Legal Case Management System case-type cross site scripting5.3 Medium
- campcodes legal case management systemCampcodes Legal Case Management System case-status cross site scripting5.3 Medium
- ritlabs tinywebTinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service ...8.6 High
- dedecmsAn arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read...6.5 Medium
- sangoma freepbx linux 7Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST...8.6 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System index.php cross site scripting5.3 Medium
- Show moreLoading…