CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5....7.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app...8.6 High
- apple macosA downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing...7.1 High
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...7.8 High
- red hat openstack platform 16.2, openstack platform 17.1 for rhel 9 +1 moreRhosp-director: cleartext passwords exposed in logs5.5 Medium
- craftcms commerce, hcltechsw hcl commerce +1 moreHCL Commerce is potentially affected by a denial of service and information disclosure vulnerability7.1 High
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at ...9.8 Critical
- rems school task managerSourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task...6.1 Medium
- totolink x2000r firmwareCross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a...4.8 Medium
- carmelo computer book storeCode-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.7.3 High
- remyandrade school task managerIn Sourcecodester School Task Manager v1.0, a vulnerability was identified within the...6.1 Medium
- directusDirectus Lacks Session Tokens Invalidation5.4 Medium
- panoramic corporation dental imaging softwareAn issue in Panoramic Corporation Digital Imaging Software v.9.1.2.7600 allows a local attacker...7.8 High
- directusDirectus allows redacted data extraction on the API through "alias"4.9 Medium
- bluerisc windowscopeAn issue in briscKernelDriver.sys in BlueRiSC WindowsSCOPE Cyber Forensics before 3.3 allows a...7.8 High
- totolink lr350 firmwareTOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password...9.8 Critical
- totolink x5000r firmwareTOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the...8.8 High
- nautobotNautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages7.5 High
- sourcecodester laboratory management systemA cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0...7.1 High
- sourcecodester laboratory management systemA cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0...6.1 Medium
- matter-labs era-compiler-solidityera-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimization5.9 Medium
- No product listedOxygen XML Web Author v26.0.0 and older and Oxygen Content Fusion v6.1 and older are vulnerable...6.1 Medium
- cryptopp crypto\+\+A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of...9.8 Critical
- gztimewalker gzctfGZ::CTF allows unprivileged user can perform XSS attacks by constructing malicious team names.6.5 Medium
- nocodbNocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue7.3 High
- totalavInsecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate...7.8 High
- wwbn avideoAVideo cross-site scripting vulnerability in the view/about.php page5.4 Medium
- nordicsemi nrf sniffer for bluetoothextcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic...7.3 High
- oretnom23 computer laboratory management system, computer laboratory management system compuer labatory management system +1 moreCross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory...6.1 Medium
- oretnom23 visitor management systemSQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester...9.4 Critical
- oretnom23 computer laboratory management systemCross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory...7.3 High
- oretnom23 human resource management systemSourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions...8.8 High
- oretnom23 human resource management systemSourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the...5.9 Medium
- oretnom23 human resource management systemInsecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource...4.3 Medium
- nocodbNocoDB SQL Injection vulnerability6.5 Medium
- nocodbNocoDB Allows Preview of File with Dangerous Content5.7 Medium
- valtimo frontend-libraries, valtimo-platform valtimo-frontend-libraries +1 more@valtimo/components exposes access token to form.io9.8 Critical
- miraheze createwikiCreateWiki vulnerable to impersonation of wiki requester5.9 Medium
- freescoutPrototype Pollution in getQueryParam Function (URL Query Parser)4.6 Medium
- ossrs simple realtime serverAn issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4...7.2 High
- freescoutFreescout vulnerable to Stored HTML Injection in Editing Received Emails7.6 High
- extremenetworks exos, extremexos +1 moreExtreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its...8.0 High
- matrix-org matrix-sdk-cryptomatrix-sdk-crypto contains a log exposure of private key of the server-side key backup5.5 Medium
- mantisbtMantisBT Cross-site Scripting vulnerability6.6 Medium
- cacti, fedoraproject fedora +1 moreAuthentication Bypass when using using older password hashes9.1 Critical
- cacti, fedoraproject fedora +1 moreCacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in database6.5 Medium
- cacti, fedoraproject fedora +1 moreCacti RCE vulnerability by file include in lib/plugin.php8.1 High
- cacti, fedoraproject fedora +1 moreCacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in database4.6 Medium
- cacti, fedoraproject fedora +1 moreSQL Injection vulnerability in automation_get_new_graphs_sql8.8 High
- cacti, fedoraproject fedora +1 moreCacti XSS vulnerability in lib/html.php by reading dirty data stored in database4.6 Medium
- Show moreLoading…