CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- unknown z-downloadsWordPress Z-Downloads plugin <= 1.11.3 - Auth. Arbitrary File Upload vulnerability9.1 Critical
- shortpixel adaptive imagesWordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- veronalabs wp smsWordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ant media server community editionAuthorization bypass in Ant Media Server5.4 Medium
- aidin phormerPhormer prior to version 3.35 contains a cross-site scripting vulnerability. If this...6.1 Medium
- kognetiks chatbot for wordpressWordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability10.0 Critical
- uniform server zero server zeroCross Site Scripting (XSS) in Servidor Uniforme Zero6.3 Medium
- unknown post grid gutenberg blocks and wordpress blog plugin, wpxpo postx +1 morePostX < 4.0.2 - Contributor+ Stored XSS5.4 Medium
- veeam service provider consoleDue to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server...9.9 Critical
- kingsoft wps officeThe WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly...7.8 High
- nikhil-bhalerao open source clinic management systemSourceCodester Open Source Clinic Management System setting.php unrestricted upload5.3 Medium
ndpiOSS-FuzzHeap-buffer-overflow in check_content_type_and_change_protocolNo score- itsourcecode college management systemKashipara College Management System delete_faculty.php sql injection5.3 Medium
- veritas system recoveryVeritas System Recovery before 23.2_Hotfix has incorrect permissions for the Veritas System...8.4 High
- xmlsoft libxml2, xmllint, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7....7.5 High
- es iperf3, netapp bootstrap os +1 moreiPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication,...5.9 Medium
- itsourcecode college management systemKashipara College Management System delete_user.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System each_extracurricula_activities.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System edit_faculty.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System edit_user.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_admin.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_extracurricular_activity.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_new_faculty.php sql injection5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_student.php sql injection5.3 Medium
- parisneo parisneo/lollms-webui, lollms web ui +1 moreStored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui7.4 High
- itsourcecode college management systemKashipara College Management System view_each_faculty.php sql injection5.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store manage_brand.php sql injection5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System ajax.php cross site scripting5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System manage_inv.php sql injection5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System manage_user.php sql injection5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System manage_receiving.php sql injection5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System manage_laundry.php sql injection5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System admin_class.php sql injection5.3 Medium
- contemporary control system basrouter bacnet basrt-bContemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service8.7 High
- dedecmsDedeCMS path traversal5.3 Medium
- ibm security guardiumIBM Security Guardium denial of service2.7 Low
- ibm security guardiumIBM Security Guardium privilege escalation7.8 High
- ibm security guardiumIBM Security Guardium command injection9.1 Critical
- ibm app connect enterpriseIBM App Connect Enterprise denial of service4.3 Medium
- ibm app connect enterpriseIBM App Connect Enterprise HTML injection5.4 Medium
- huawei emui, harmonyos +1 moreThe WindowManager module has a vulnerability in permission control. Impact: Successful...6.2 Medium
- huawei emui, harmonyos +1 moreCracking vulnerability in the OS security module Impact: Successful exploitation of this...6.4 Medium
- huawei emui, harmonyos +1 moreCracking vulnerability in the OS security module Impact: Successful exploitation of this...6.8 Medium
- huawei emui, harmonyos +1 moreNULL pointer access vulnerability in the clock module Impact: Successful exploitation of this...5.9 Medium
- huawei emui, harmonyos +1 moreRace condition vulnerability in the soundtrigger module Impact: Successful exploitation of this...4.1 Medium
- huawei emui, harmonyos +1 moreRace condition vulnerability in the binder driver module Impact: Successful exploitation of this...8.4 High
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the account module Impact: Successful exploitation of this...6.2 Medium
- huawei emui, harmonyos +1 moreDenial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this...6.2 Medium
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the PMS module Impact: Successful exploitation of this...7.1 High
- huawei emui, harmonyos +1 moreOut-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this...5.6 Medium
- Show moreLoading…