CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- ofcms project ofcmsOFCMS V1.1.2 is vulnerable to SQL Injection via the new table function.9.8 Critical
- cea-hpc sshproxysshproxy vulnerable to SSH option injection3.5 Low
- freelancelot oceanicOceanic allows unsanitized user input to lead to path traversal in URLs6.5 Medium
- red hat satellite 6.15 for rhel 8Foreman: host ssh key not being checked in remote execution6.8 Medium
- typo3TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController5.3 Medium
- typo3TYPO3 vulnerable to Cross-Site Scripting in ShowImageController5.4 Medium
- typo3TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module5.4 Medium
- typo3TYPO3 vulnerable to an HTML Injection in the History Module3.5 Low
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...6.3 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...5.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- octoprintOctoPrint Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled7.1 High
- abb robotware, robotware 6, robotware 7 +2 moreAn attacker who successfully exploited these vulnerabilities could cause the robot to stop, make...6.5 Medium
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.9.8 Critical
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.4.8 Medium
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/DocumentTemplate/{GUID]...5.5 Medium
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the ...7.5 High
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is SSRF via Document template...5.9 Medium
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file...9.8 Critical
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash when generating ftdc5.3 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may have unexpected application behaviour due to invalid BSON7.5 High
- abb robotware, robotware 6, robotware 7 +2 moreAn attacker who successfully exploited these vulnerabilities could cause the robot to stop, make...7.6 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest...7.1 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth...7.1 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader...7.1 High
- na vmware workstation, vmware fusion, workstation +2 moreVMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A...9.3 Critical
- shaonsina sina extension for elementorSina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.5.3 - Authenticated (Contributor+) DOM-Based Cross-Site Script…6.4 Medium
- athemes sydney toolboxSydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget6.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- apache airflowApache Airflow: XSS vulnerability in Task Instance Log/Log Details5.4 Medium
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected...7.8 High
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 4). The affected...7.8 High
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 2). The affected...7.8 High
- siemens jt2go, teamcenter visualization v14.1, teamcenter visualization v14.2 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter...7.8 High
- siemens jt2go, teamcenter visualization v14.1, teamcenter visualization v14.2 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V2312.0001), Teamcenter...7.8 High
- siemens polarion almA vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene...6.5 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...4.8 Medium
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Nastran 2306 (All versions), Simcenter Nastran...7.3 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...9.4 Critical
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...6.9 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...4.8 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...4.8 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...7.1 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...6.9 Medium
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected...7.8 High
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected...7.8 High
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected...7.8 High
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected...7.8 High
- siemens solid edge, solid edge se2024 +1 moreA vulnerability has been identified in Solid Edge (All versions < V224.0 Update 5). The affected...7.8 High
- Show moreLoading…