CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- adobe aero desktop, aero +1 moreAdobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files7.8 High
- leevio happy addons for elementorHappy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widget6.4 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Missing Authorization9.8 Critical
- royal-elementor-addons royal elementor addons, wproyal royal elementor addons and templates, royal addons for elementor – addons and templates kit for elementor +2 moreRoyal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget5.4 Medium
- rems interactive map with markerSourceCodester Interactive Map with Marker Add Marker Marker Name cross site scripting5.3 Medium
- rems interactive map with markerSourceCodester Interactive Map with Marker delete-mark.php sql injection5.3 Medium
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter BMP File Parsing Out Of Bounds Write Vulnerability7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter PSD File Parsing Acces Violation Read Vulnerability5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter TGA File Parsing Acces Violation Read Vulnerability5.5 Medium
- adobe substance3d - painter, substance 3d painter +1 moreAdobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability7.8 High
- adobe illustratorIllustrator 2024 BMP File Parsing Memory Corruption7.8 High
- adobe illustratorIllustrator 2024 TIF file parsing Out Of Bound Read Information disclosure vulnerability5.5 Medium
- adobe illustratorAdobe Illustrator TIF File Parsing Use-After-Free Remote memory corruption7.8 High
- sinamjackson schoolwebtechSourceCodester SchoolWebTech home.php unrestricted upload6.9 Medium
- avimegladon custom post type attachmentCustom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcode6.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widget6.4 Medium
- d-link dar-7000-40, dlink dar-7000 firmware +1 moreD-Link DAR-7000-40 resmanage.php os command injection5.3 Medium
- d-link dar-7000-40, dlink dar-7000 firmware +1 moreD-Link DAR-7000-40 urlblist.php unrestricted upload5.3 Medium
- d-link dar-7000-40, dlink dar-7000 firmware +1 moreD-Link DAR-7000-40 url.php unrestricted upload5.3 Medium
- d-link dar-7000-40, dlink dar-7000 firmware +1 moreD-Link DAR-7000-40 resmanage.php unrestricted upload5.3 Medium
- trellix epolicy orchestratorHardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5...7.5 High
- trellix epolicy orchestratorePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct...4.3 Medium
- d-link dar-7000-40, dlink dar-7000 firmware +1 moreD-Link DAR-7000-40 onlineuser.php unrestricted upload5.3 Medium
- mndpsingh287 newsletter popupNewsletter Popup <= 1.2 - Admin+ Stored XSS4.8 Medium
- mndpsingh287 newsletter popup, newsletter popup project popup +1 moreNewsletter Popup <= 1.2 - List Deletion via CSRF8.8 High
- mndpsingh287 newsletter popupNewsletter Popup <= 1.2 - Subscriber Deletion via CSRF6.9 Medium
- mndpsingh287 newsletter popupNewsletter Popup <= 1.2 - Unauthenticated Stored XSS6.1 Medium
- themeisle menu icons by themeisleMenu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload6.4 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL Injection8.8 High
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course Deletion6.5 Medium
- d-link dar-7000-40, dlink dar-7000 firmware +1 moreD-Link DAR-7000-40 licenseauthorization.php unrestricted upload5.3 Medium
- donbermoy online art gallery management systemSourceCodester Online Art Gallery Management System adminHome.php unrestricted upload5.3 Medium
- mayuri k best courier management systemSourceCodester Best Courier Management System view_parcel.php unrestricted upload5.3 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System sql injection5.3 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System sql injection5.3 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System sql injection5.3 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System sql injection5.3 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System cross-site request forgery6.9 Medium
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System sql injection5.3 Medium
- themeisle visualizer: tables and charts manager for wordpressVisualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution8.8 High
- oretnom23 simple online bidding systemSourceCodester Simple Online Bidding System unrestricted upload6.9 Medium
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- sourcecodester school intramurals student attendance management system, oretnom23 school intramurals - student attendance management system +1 moreSourceCodester School Intramurals Student Attendance Management System manage_student.php sql injection5.3 Medium
- sourcecodester school intramurals student attendance management system, oretnom23 school intramurals - student attendance management system, sourcecodester school instramurals +2 moreSourceCodester School Intramurals Student Attendance Management System manage_course.php sql injection5.3 Medium
- codezips e-commerce siteCodezips E-Commerce Site addproduct.php unrestricted upload5.3 Medium
- oretnom23 simple image stack websiteSourceCodester Simple Image Stack Website cross site scripting5.3 Medium
- oretnom23 employee and visitor gate pass logging system, sourcecodester employee visitor gatepass logging system +1 moreSourceCodester Employee and Visitor Gate Pass Logging System unrestricted upload5.3 Medium
libultrahdrOSS-FuzzHeap-buffer-overflow in ultrahdr::gain_map_metadata::decodeGainmapMetadataNo scorelibultrahdrOSS-FuzzHeap-buffer-overflow in ultrahdr::getYuv420PixelNo score- online discussion forum site project discussion forum site, razormist online discussion forum site +1 moreSourceCodester Online Discussion Forum Site registerH.php unrestricted upload6.9 Medium
- Show moreLoading…