CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- cacti, fedoraproject fedora +1 moreCacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in database5.7 Medium
- mantisbtMantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- mantisbtMantisBT user account takeover in the signup/reset password process7.3 High
- cactiCacti XSS vulnerability in display_settings6.1 Medium
- eprosima fast-dds, fast dds +1 moreFastDDS heap buffer overflow when publisher sends malformed packet8.2 High
- eprosima fast-dds, fast dds +1 moreFastDDS crash when publisher send malformed packet8.2 High
- cactiCacti command injection in cmd_realtime.php10.0 Critical
- cacti, fedoraproject fedora +1 moreCacti Cross-site Scripting vulnerability when using JavaScript based messaging API5.4 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store unrestricted upload5.3 Medium
- gocdGoCD vulnerable to reflected Cross-site Scripting possible on server loading page during start-up3.1 Low
- cactiCacti Cross-site Scripting vulnerability when managing trees7.6 High
- campcodes online laundry management systemCampcodes Online Laundry Management System admin_class.php improper authorization5.3 Medium
- cacti, fedoraproject fedora +1 moreCacti RCE vulnerability when importing packages9.1 Critical
- surveykingAn issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID...8.8 High
- surveykingSurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an...9.1 Critical
- javahuang surveykingAn issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user...4.3 Medium
- debian linux, linux kernel +1 moreio_uring: drop any code related to SCM_RIGHTS7.8 High
- campcodes online laundry management systemCampcodes Online Laundry Management System index.php file inclusion6.9 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System HTTP Request Parameter manage_user.php resource injection5.3 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC gre_add_commit.php os command injection5.3 Medium
- strongswanstrongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper...7.7 High
- powerdns dnsdistTransfer requests received over DoH can lead to a denial of service in DNSdist7.5 High
- arox school erp pro, arox solution school erp pro+responsive, arox school erp pro\+responsive +2 moreSQL Injection in School ERP Pro+Responsive by AROX SOLUTION9.8 Critical
- arox school erp pro, arox solution school erp pro+responsive, arox school erp pro\+responsive +2 moreCross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION6.5 Medium
- arox school erp pro, arox solution school erp pro+responsive, arox school erp pro\+responsive +2 moreCross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION6.5 Medium
- agentejo cockpit, cockpit cms, cockpit cms +2 moreUnrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo9.8 Critical
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC detail.php os command injection5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 morefirewire: nosy: ensure user_length is taken into account when fetching packet contents7.8 High
- linux, linux kernel, fedoraproject fedora +2 moredrm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v27.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: Fix use-after-free bugs caused by sco_sock_timeout8.0 High
- linux, linux kernel +1 moreusb: aqc111: check packet for fixup for true limit5.5 Medium
- jonschlinkert bracesMemory Exhaustion in braces7.5 High
- jonschlinkert micromatchRegular Expression Denial of Service in micromatch5.3 Medium
- envothemes envo's elementor templates & widgets for woocommerce, envo\'s elementor templates \& widgets for woocommerce +1 moreWordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <=1.4.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- all bootstrap blocks bootstrap blocks, miles all bootstrap blocks +1 moreWordPress All Bootstrap Blocks plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- hidden depth sticky bannerWordPress Sticky banner plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC static_route_edit_commit.php os command injection5.3 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC interface_commit.php os command injection5.3 Medium
- propovoice crmWordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- easy digital downloads digital downloads, sandhillsdev easy digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerability5.3 Medium
- radiustheme shopbuilder – elementor woocommerce builder addonsWordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerability5.3 Medium
- codeyatri gutenifyWordPress Gutenify plugin <= 1.4.0 - Sensitive Data Exposure via API vulnerability5.3 Medium
- yms vis proImproper authentication in YMS VIS Pro9.8 Critical
- ninja team filebird, firebirdsql firebird +1 moreWordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability5.3 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerability5.3 Medium
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerability10.0 Critical
- thomas scholl canvasio3d lightWordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerability9.9 Critical
- pk favicon managerWordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability9.1 Critical
- jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 moreWordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability9.1 Critical
- Show moreLoading…