CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- ansanwan siadminSQL injection vulnerability in SiAdmin9.8 Critical
- adobe dreamweaver, dreamweaver desktop +1 moreDreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)7.8 High
- master-addons master addons, litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits +1 moreMaster Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- adobe framemakerAdobe FrameMaker GIF File parsing Out Of Bound Write7.8 High
- adobe framemakerAdobe FrameMaker TIF File parsing Out Of Bound Write7.8 High
- adobe framemakerAdobe FrameMaker ICO File Parsing Heap Memory Corruption5.5 Medium
- adobe framemakerAdobe FrameMaker WEBP File Parsing Out Of Bound Write7.8 High
- adobe framemakerAdobe FrameMaker 3DS File Parsing Heap Memory Corruption7.8 High
- adobe framemakerAdobe FrameMaker DOC File Parsing Memory Corruption5.5 Medium
- adobe framemakerAdobe FrameMaker XLS File Parsing Buffer Overflow7.8 High
- adobe framemakerAdobe FrameMaker PDF File Pparsing Out of Bound Read5.5 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site Scripting6.4 Medium
- envothemes envo extraEnvo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scripting6.4 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, n squared appointment booking calendar, nsquared simply schedule appointments +2 moreAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- brainstorm force convertplusConvertPlus <= 3.5.26 - Authenticated (Contributor+) PHP Object Injection7.5 High
- rankmath rank math seo – ai seo tools to dominate seo rankingsRank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the...5.5 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates...3.5 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper...5.9 Medium
- code-projects simple chat systemcode-projects Simple Chat System Message cross site scripting5.3 Medium
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection8.8 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation8.8 High
- themeum tutor lms pro, tutor lms +1 moreTutor LMS Pro <= 2.7.0 - Missing Authorization7.3 High
- code-projects simple chat systemcode-projects Simple Chat System register.php cross site scripting5.3 Medium
- code-projects simple chat systemcode-projects Simple Chat System register.php sql injection5.3 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreArbitrary Upload & Read via Path Traversal in parisneo/lollms-webui9.6 Critical
- parisneo parisneo/lollms, lollms-webui +1 moreArbitrary Code Execution in parisneo/lollms9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution in parisneo/lollms-webui9.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Access Control in mlflow/mlflow5.4 Medium
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal in parisneo/lollms-webui8.4 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 moreRemote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui9.8 Critical
- llamaindex, run-llama llama index, run-llama/llama index +2 moreCommand Injection in run-llama/llama_index8.8 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Bypass in mlflow/mlflow7.5 High
- imartinez imartinez/privategpt, pribai privategpt, zylon-ai private-gpt +2 moreLocal File Inclusion in imartinez/privategpt7.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreCommand Injection in parisneo/lollms-webui8.4 High
- chuanhuchatgpt project chuanhuchatgpt, gaizhenbiao gaizhenbiao/chuanhuchatgpt +1 moreLocal File Inclusion (LFI) in gaizhenbiao/chuanhuchatgpt7.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webui7.5 High
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 morePath Traversal leading to Remote Code Execution in parisneo/lollms-webui9.8 Critical
- imartinez imartinez/privategpt, pribai privategpt +1 moreUnrestricted File Upload Leading to XSS in imartinez/privategpt6.8 Medium
- code-projects simple chat systemcode-projects Simple Chat System login.php sql injection5.3 Medium
- adobe animateWhen Animate parses FLA files, there is a UAF vulnerability caused by referencing uninitialized memory at Animate.exe+0x1149dcf7.8 High
- adobe animateWhen Animate parses FLA files, there is an out-of-bounds write vulnerability at animate+0x123df287.8 High
- adobe animateAdobe Animate OGG File Parsing Heap Memory Corruption remote code execution Vulnerability7.8 High
- adobe animateAdobe Animate SWF File Parsing Memory corruption5.5 Medium
- adobe animateWhen Adobe Animate parses FLA files, there is a heap out-of-bounds write vulnerability at Animate.exe+0x125D3917.8 High
- adobe animateAdobe Animate 2024 AI File parsing Stack base buffer overflow Remote Code execution Vulnerability7.8 High
- adobe animateAdobe Animate 2024 Out of Bound Write Remote Code Execution Vulnerability7.8 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Out-of-bounds Read (CWE-125)5.5 Medium
- Show moreLoading…