CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
drupal/corePackagistDrupal External URL injection through URL aliases leading to Open RedirectNo scoredrupal/corePackagistDrupal Content moderation Access bypassNo scoredoctrine/ormPackagistdoctrine/orm Regression in Query Parenthesis can have Security ImplicationsNo scoredoctrine/ormPackagistDoctrine SQL injection vulnerabilityNo score- wolfi-dev wolfictlwolfictl leaks GitHub tokens to remote non-GitHub git servers4.4 Medium
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Incorrect Authorization6.5 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_exam_mark_insert_form1.php sql injection5.3 Medium
- stakater forecastleStakater Forecastle has a directory traversal vulnerability7.5 High
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Cryptographic Key7.7 High
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business SQL Injection8.8 High
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Storing Passwords in a Recoverable Format4.9 Medium
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Active Debug Code9.8 Critical
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Credentials9.8 Critical
- byzoro smart s200 management platformByzoro Smart S200 Management Platform userattestation.php unrestricted upload5.3 Medium
- rubinchu r-pan-scaffoldingAn arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to...5.4 Medium
- kykmsAn arbitrary file upload vulnerability in KYKMS v1.0.1 and below allows attackers to execute...5.4 Medium
- dootaskAn arbitrary file upload vulnerability in dootask v0.30.13 allows attackers to execute arbitrary...5.4 Medium
- cyberpower powerpanel businessCyberPower PowerPanel business Relative Path Traversal8.8 High
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Password9.8 Critical
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Password9.8 Critical
dtb-aarch64openSUSE,kernel-64kbopenSUSE,kernel-azureopenSUSE +18 more +20 moreSecurity update for the Linux KernelNo score- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_due_payment.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_attendance_history1.php sql injection5.3 Medium
doctrine/doctrine-modulePackagistdoctrine/doctrine-module zero-valued authentication credentials vulnerability6.5 Mediumdoctrine/dbalPackagistDoctrine DBAL SQL injection possibility8.1 Highdatadog/dd-tracePackagistdatadog/dd-trace Circumvents open_basedir INI directiveNo score- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_student2.php sql injection5.3 Medium
contao/corePackagistcontao/core PHP object injection vulnerability allows for arbitrary code executionNo score- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System show_student1.php sql injection5.3 Medium
contao/corePackagistcontao/core Insufficient input validation allows for code injection and remote execution9.0 Critical- vitec exterity avediaserverInsecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a...8.8 High
codeigniter/frameworkPackagistcodeigniter/framework SQL injection in ODBC database driver10.0 Criticalcodeigniter/frameworkPackagistInadequate XSS Prevention in CodeIgniter/Framework Security Library4.7 Mediumcartalyst/sentryPackagistOpenCFP Framework (Sentry) Account takeover via null password reset codes8.9 High- mozilla hawkInstall-type password disclosure vulnerability in Universal Installer including the Silent...6.5 Medium
brotkrueml/codehighlightPackagistDenial of Service in extension "Code Highlight" (codehighlight)5.0 Mediumbrotkrueml/codehighlightPackagistDenial of Service in extension "Code Highlight" (codehighlight)4.7 Medium- cisco asyncos, secure email and web manager +1 moreCisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco asyncos, secure email +1 moreA vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure...4.8 Medium
- cisco asyncos, secure email and web manager, secure web appliance +3 more +5 moreA vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure...4.8 Medium
amphp/httpPackagistamphp/http Host Header Injection vulnerabilityNo scoreamphp/artaxPackagistamphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptanceNo scoreamphp/http-clientPackagistamphp/http-client Header leakage on cross-domain redirects4.0 Mediumasymmetricrypt/asymmetricryptPackagistasymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA EncryptionNo scorealterphp/easyadmin-extension-bundlePackagisteasyadmin-extension-bundle action case insensitivity7.1 Highadodb/adodb-phpPackagistADOdb SQL injection vulnerabilityNo score3f/pygmentizePackagistpygmentize Remote Code Execution8.1 High- cisco asyncos, secure email, secure email and web manager +2 moreA vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure...6.1 Medium
- itsourcecode college management systemKashipara College Management System view_students_each_detail.php sql injection5.3 Medium
- cisco network services orchestratorA vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of...7.8 High
- Show moreLoading…