CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Hyper-V Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2022 23h2 +1 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +17 more +19 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Mobile Broadband Driver Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- ge healthcare logiq e, logiq e10, logiq e10s +20 more +22 morePath traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component7.7 High
- ge healthcare logiq e, logiq e10, logiq e10s +13 more +15 morePath traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component6.2 Medium
- oretnom23 simple customer relationship management systemSQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0...5.4 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...6.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5,...6.2 Medium
- fortinet fortiportalA Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0...7.1 High
- fortinet fortiadcAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...5.2 Medium
- fortinet fortiosA stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7...6.8 Medium
- fortinet fortiosA double free vulnerability [CWE-415] in Fortinet FortiOS before 7.0.0 may allow a privileged...6.5 Medium
- fortinet fortivoiceAn authorization bypass through user-controlled key vulnerability [CWE-639] in...6.7 Medium
- fortinet fortios, fortiproxy +1 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL...4.7 Medium
- fortinet fortinacAn improper neutralization of inputs during web page generation vulnerability [CWE-79] in...6.1 Medium
- fortinet fortiosAn improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet...5.0 Medium
- fortinet fortisandboxA client-side enforcement of server-side security in Fortinet FortiSandbox version 4.4.0 through...8.6 High
- oretnom23 simple customer relationship management systemCross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management...5.4 Medium
- No product listedCross Site Scripting vulnerability in Evertz microsystems MViP-II Firmware 8.6.5, XPS-EDGE-*...6.1 Medium
- ge healthcare invenia abus 2.0, logiq e, logiq e10 +17 more +19 moreOS command injection vulnerabilities in GE HealthCare ultrasound devices8.4 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection...8.0 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection...6.0 Medium
- totolink x5000r, x5000r firmware +1 moreTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection...9.8 Critical
- totolink x5000r, x5000r firmware +1 moreTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command...6.0 Medium
- prestashopAnonymous PrestaShop customer can download other customers' invoices5.3 Medium
- prestashopPrestaShop vulnerable to XSS via customer contact form in FO, through file upload9.7 Critical
- htmlyhtmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the...6.5 Medium
- d-link dir-822, dlink dir-822\+ firmware +1 moreD-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in...7.5 High
- pantsel kongaKonga is vulnerable to Cross Site Scripting (XSS) attacks5.4 Medium
- php-censorPHP Censor uses a weak hashing algorithm for the remember me key5.3 Medium
- ge healthcare invenia abus, invenia abus 2.0, logiq e +19 more +21 moreElevation of privileges via misconfigured access control list in GE HealthCare ultrasound devices7.4 High
- phoenix securecore™ for intel gemini lake, securecore technology +1 morePotential buffer overflow when handling UEFI variables7.5 High
- phoenix securecore™ for intel alder lake, securecore™ for intel coffee lake, securecore™ for intel comet lake +7 more +9 morePotential buffer overflow when handling UEFI variables7.5 High
- phoenix winflash driver, phoenixtech winflash +1 moreWinFlash Driver Permissions Issue7.8 High
- hoppscotch extension, hoppscotch-extension +1 moreHoppscotch Extension responds to calls made by origins not in the domain list7.6 High
- Show moreLoading…