CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- cisco secure clientA vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an...6.8 Medium
- cisco network services orchestratorA vulnerability in the web-based management interface of Cisco Crosswork Network Services...4.7 Medium
- cisco asyncos, secure email +1 moreA vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email...6.1 Medium
- cisco appdynamicsA vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated,...5.5 Medium
github.com/goreleaser/goreleaserGogoreleaser shows environment by default6.2 Medium- progress telerik report server, telerik reporting +1 moreTrust Boundary Violation Vulnerability5.3 Medium
- progress software telerik report server, progress telerik reporting +1 moreXML External Entity Processing Information Disclosure6.5 Medium
- progress telerik reportingProgress Telerik Reporting Local Deserialization Vulnerability7.7 High
- alpitronic hypercharger ev chargeralpitronic Hypercharger EV Charger Use of Default Credentials8.3 High
- progress telerik reportingProgress Telerik Reporting Local Instantiation Vulnerability7.7 High
- microfocus imanagerFile Upload vulnerability in unauthenticated session found in iManager.5.6 Medium
- microfocus imanagerBroken Authentication vulnerability in iManager3.5 Low
- microfocus imanagerXML External Entity injection vulnerability in iManager7.8 High
- microfocus imanagerServer-Side Request Forgery vulnerability in iManager5.3 Medium
- microfocus imanagerPath Traversal vulnerability found in iManager5.7 Medium
- subnet powersystem centerSUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Component8.6 High
- microfocus imanagerRemote Code Execution vulnerability in the iManager7.8 High
- progress telerik ui, telerik ui for winforms +1 moreLocal code execution vulnerability in Telerik UI for WinForms7.2 High
- getgrav gravGrav Arbitrary File Read to Account Takeover8.5 High
- microfocus imanagerRemote Code Execution vulnerability in the iManager7.6 High
- microfocus imanagerRemote Code Execution vulnerability in the iManager7.8 High
- microfocus imanagerServer-Side Request Forgery vulnerability in iManager5.3 Medium
- erambaA stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3...5.4 Medium
- google gvisorDenial-of-Service in Gvisor4.8 Medium
- nozomi networks arcPath traversal via 'zip slip' in Arc before v1.6.08.9 High
- nozomi networks arcSensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.05.2 Medium
- nozomi networks arcUnsafe temporary data privileges on Unix systems in Arc before v1.6.07.3 High
- nozomi networks arcMissing authentication for local web interface in Arc before v1.6.07.3 High
- stalwartlabs mail-serverUnprivileged Stalwart Mail Server user can read files as root6.8 Medium
- sailpoint identity security cloudSailPoint Identity Security Cloud Improper Access Control6.5 Medium
- fluxcd source-controllersource-controller leaks theAzure Storage SAS token into logs on connection errors5.1 Medium
- sailpoint identity security cloudSailPoint Identity Security Cloud Connector File Path Traversal Vulnerability4.2 Medium
- sailpoint identity security cloudSecurity implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints9.1 Critical
- jinher oa, tongda2000 tongda oa, tongda office anywhere +2 moreTongda OA delete.php sql injection5.3 Medium
- insyde insydeh2oA memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09,...7.4 High
- insyde insydeh2oA memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before...7.4 High
- code-projects budget managementCode-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter.9.8 Critical
- code-projects budget managementCode-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget...6.1 Medium
- insyde insydeh2o, kernel +1 moreA memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel...7.4 High
- jfrog artifactoryJFrog Artifactory Header Injection6.4 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode8.8 High
- throughtek kalay sdk, owletcare cam 2 firmware, cam firmware +3 more +5 moreThroughTek Kalay SDK error in handling the PSK identity8.1 High
- throughtek kalay sdk, owletcare cam 2 firmware, cam firmware +3 more +5 moreThroughTek Kalay SDK insufficient verification of message authenticity4.3 Medium
- roku indoor camera se, wyze cam v3, roku indoor camera se firmware +2 more +4 moreStack-based buffer overflow in message parser functionality7.2 High
- owlet cam v1, cam v2, owletcare cam 2 firmware +2 more +4 moreOwlet Camera OS command injection7.2 High
articrates.io,tor-circmgrcrates.io +1 moreTor path lengths too short when "full Vanguards" configured7.3 Higharticrates.io,tor-circmgrcrates.io +1 moreTor Arti's STUB circuits incorrectly have a length of 26.2 Medium- kraftplugins mega elements, mega elements – addons for elementor +1 moreMega Elements <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget6.4 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-23614: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreUse-After-Free vulnerability in the latest Adobe Acrobat Reader DC when open malicious PDF file7.8 High
- Show moreLoading…