CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- campcodes online examination systemCampcodes Online Examination System addCourseExe.php sql injection5.3 Medium
monolog/monologPackagistMonolog Header injection in NativeMailerHandlerNo score- campcodes online examination systemCampcodes Online Examination System updateQuestion.php sql injection5.3 Medium
- campcodes online examination systemCampcodes Online Examination System submitAnswerExe.php sql injection5.3 Medium
magento/community-editionPackagistMagento RCE,XSS and other vulnerabilitiesNo scoremagento/community-editionPackagistMagento Cross-Site Scripting (XSS) vulnerabilityNo scoremagento/community-editionPackagistMagento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilitiesNo scoremagento/community-editionPackagistMagento Open Source Security Advisory: Patch SUPEE-10975No scoremagento/community-editionPackagistMagento Patch SUPEE-9652 - Remote Code Execution using mail vulnerabilityNo scoremagento/community-editionPackagistMagento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilitiesNo scoremagento/community-editionPackagistMagento Patch SUPEE-10752 - Multiple security enhancements vulnerabilitiesNo score- campcodes online examination systemCampcodes Online Examination System selExamAttemptExe.php sql injection5.3 Medium
livewire/livewirePackagistData Leakage Vulnerability in livewire/livewireNo scorelaravel/socialitePackagistInsecure State Generation in laravel/socialiteNo scorelaravel/socialitePackagistState Guessing Vulnerability in laravel/socialiteNo scorelaravel/frameworkPackagistLaravel Guard bypass in Eloquent modelsNo scorelaravel/frameworkPackagistLaravel Cross-site Scripting (XSS) vulnerability in blade templating4.3 Mediumlaravel/frameworkPackagistLaravel Cookie serialization vulnerabilityNo scorelaravel/frameworkPackagistLaravel Hijacked authentication cookies vulnerabilityNo scorelaravel/frameworkPackagistLaravel Risk of mass-assignment vulnerabilitiesNo scoreklaviyo/magento2-extensionPackagistRead private customer data reclaiming carts in Klaviyo MagentoNo scoreilluminate/encryptionPackagistLaravel Encrypter Failure to decryption vulnerabilityNo score- campcodes online examination systemCampcodes Online Examination System result.php sql injection5.3 Medium
illuminate/cookiePackagistLaravel Cookie serialization vulnerabilityNo scoreilluminate/viewPackagistLaravel Cross-site Scripting vulnerability in blade templating4.7 Mediumilluminate/databasePackagistLaravel Risk of mass-assignment vulnerabilitiesNo scoreilluminate/cookiePackagistLaravel RCE vulnerability in "cookie" session driverNo scoreilluminate/authPackagistLaravel Hijacked authentication cookies vulnerabilityNo scoregregwar/rstPackagistgregwar/rst Local File Inclusion VulnerabilityNo scoregree/josePackagistgree/jose - "None" Algorithm treated as valid in tokensNo scorefuel/corePackagistfuel/core Crypt encryption compromised.No scorefuel/corePackagistfuel/core ImageMagick driver does not escape all shell arguments.No scorefriendsofsymfony/user-bundlePackagistFOSUserBundle User Identity Validation VulnerabilityNo scorefriendsofsymfony/user-bundlePackagistFOSUserBundle Session Hijacking VulnerabilityNo scorefriendsofsymfony/user-bundlePackagistFOSUserBundle Entropy is lost in the TokenGeneratorNo scorefriendsofsymfony/rest-bundlePackagistFOSRestBundle issue with broken validation of JSONP callbacksNo scorefriendsofsymfony/oauth2-phpPackagistfriendsofsymfony/oauth2-php open redirection in oauthNo scorefirebase/php-jwtPackagistfirebase/php-jwt: "None" Algorithm treated as valid on tokensNo scoreezsystems/repository-formsPackagisteZ Platform User data disclosureNo scoreezsystems/platform-ui-assets-bundlePackagisteZ Platform Admin UI is vulnerable to Cross-site Scripting (XSS)No scoreezsystems/ezpublish-legacyPackagistEz Platform Object Injection in legacy shop moduleNo scoreezsystems/ezpublish-legacyPackagistEZsystems Remote code execution in file uploadsNo scoreezsystems/ezpublish-legacyPackagistEz Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploadsNo score- campcodes online examination systemCampcodes Online Examination System ranking-exam.php sql injection5.3 Medium
ezsystems/ezpublish-legacyPackagisteZ Publish Legacy Passwordless login for LDAP usersNo score- paperless-ngxpaperless-ngx's remote user auth via header works even when disabling it for API5.5 Medium
ezsystems/ezpublish-legacyPackagisteZ Publish Legacy Cross-site Scripting (XSS) in 'disabled module' error templateNo scoreezsystems/ezpublish-kernelPackagisteZ Platform Object Injection in SiteAccessMatchListenerNo scoreezsystems/ezpublish-legacyPackagisteZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilitiesNo scoreezsystems/ezpublish-legacyPackagisteZ Publish Information disclosure in backend content tree menuNo score- Show moreLoading…