CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications...5.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon...5.3 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....7.2 High
- visualmodo borderless, borderless – addons and templates for elementor +1 moreBorderless - Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreMultiple authenticated command injection vulnerabilities exist in the command line interface....7.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is an arbitrary file deletion vulnerability in the Central Communications service accessed...8.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's...8.2 High
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a command injection vulnerability in the underlying deauthentication service that could...9.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are command injection vulnerabilities in the underlying Soft AP Daemon service that could...9.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a command injection vulnerability in the underlying Central Communications service that...9.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of...9.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are buffer overflow vulnerabilities in the underlying Central Communications service that...9.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreThere are buffer overflow vulnerabilities in the underlying Central Communications service that...9.8 Critical
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol9.8 Critical
- tg123 sshpipersshpiper's Enabling of Proxy Protocol without proper feature flagging allows faking source address5.3 Medium
github.com/containerd/containerdGocontainerd started with non-empty inheritable Linux process capabilitiesNo score- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) aos-8 instant and aos-10 ap +2 more +4 moreUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol9.8 Critical
github.com/nats-io/nats-serverGo,github.com/nats-io/nats-server/v2Go +1 moreNATS server TLS missing ciphersuite settings when CLI flags usedNo score- teplitsa of social technologies leykaWordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability8.8 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettings5.4 Medium
- progress whatsup goldWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController4.2 Medium
- dotmesh-io dotmeshGHSL-2020-254: Arbitrary file read and/or write in dotmesh8.1 High
- t-soft e-commerceThe T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when...7.2 High
- libreoffice, debian linux, fedoraproject fedora +2 moreGraphic on-click binding allows unchecked script execution6.5 Medium
- reporticoReportico Web fails to invalidate cookies upon logout7.8 High
scrapyPyPIScrapy allows redirect following in protocols other than HTTP6.5 MediumscrapyPyPIScrapy's redirects ignoring scheme-specific proxy settings4.3 Medium- scrapy, scrapy scrapy/scrapy +1 moreAuthorization Header Leakage in scrapy/scrapy on Scheme Change Redirects7.5 High
- b&r industrial automation automation studioDLL Hijacking Vulnerability in Automation Studio7.2 High
- git, debian linux, fedoraproject fedora +2 moreGit's protections for cloning untrusted repositories can be bypassed7.4 High
- git, debian linux, fedoraproject fedora +2 moreLocal Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory3.9 Low
- proofpoint enterprise protectionThe Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input...7.5 High
- proofpoint enterprise protectionThe Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side...5.0 Medium
- git, fedoraproject fedora +1 moreCloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will3.9 Low
- b&r industrial automation adi .net sdk, adi development kit, adi driver universal +22 more +24 moreInsecure Loading of Code in B&R Products7.2 High
- git, debian linux, fedoraproject fedora +2 moreGit vulnerable to Remote Code Execution while cloning special-crafted local repositories8.2 High
- gitGit's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution9.1 Critical
- casap automated enrollment system project automated enrollment systemSQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source...9.8 Critical
- mozilla firefoxMemory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefoxA file dialog shown while in full-screen mode could have resulted in the window remaining...8.2 High
- mozilla firefoxAn iterator stop condition was missing when handling WASM code in the built-in profiler,...5.9 Medium
- mozilla firefoxThe `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing...6.5 Medium
- mozilla firefoxWhen a network error occurred during page load, the prior content could have remained in view...7.5 High
- mozilla firefoxAn HTTP digest authentication nonce value was generated using `rand()` which could lead to...5.9 Medium
- mozilla firefoxA memory allocation check was missing which would lead to a use-after-free if the allocation...8.6 High
- mozilla firefoxDifferent techniques existed to obscure the fullscreen notification in Firefox for Android. ...4.3 Medium
- mozilla firefoxWeb application manifests were stored by using an insecure MD5 hash which allowed for a hash...8.1 High
- mozilla firefoxMultiple WebRTC threads could have claimed a newly connected audio input leading to use-after...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen saving a page to PDF, certain font styles could have led to a potential use-after-free crash...8.8 High
- Show moreLoading…