CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- intel ethernet adapter complete driver pack, ethernet connections boot utility preboot images and efi drivers +1 moreImproper access control in some Intel(R) Ethernet Controller Administrative Tools software before...6.7 Medium
- intel computing improvement programUncontrolled search path for some Intel(R) Computing Improvement Program software before version...6.7 Medium
- intel extreme tuning utilityInsecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow...6.7 Medium
- intel graphics performance analyzer, graphics performance analyzers framework +1 moreUncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow...6.7 Medium
- intel graphics performance analyzer, graphics performance analyzers +1 moreUncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an...6.7 Medium
- intel processor diagnostic toolUncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9...6.7 Medium
- No product listedImproper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board...5.8 Medium
- intel server system d50tnp2mhsvac firmwareImproper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel(R)...7.2 High
- intel server m50fcp family, server d50fcp family, server board s2600bp firmware +2 moreImproper input validation in PfrSmiUpdateFw driver in UEFI firmware for some Intel(R) Server...7.5 High
- intel server system d50tnp2mhsvac firmwareImproper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server...7.5 High
- intel server system d50tnp2mhsvac firmwareImproper input validation in UserAuthenticationSmm driver in UEFI firmware for some Intel(R)...7.5 High
- intel server system d50tnp2mhsvac firmwareImproper input validation in PprRequestLog module in UEFI firmware for some Intel(R) Server...7.5 High
- intel neural compressor softwareTime-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2...4.7 Medium
- intel neural compressor softwareImproper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may...10.0 Critical
- wpdeveloper reviewx, reviewx – multi-criteria reviews for woocommerce with google reviews & schema +1 moreReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization4.3 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection5.0 Medium
- ithemelandco wpbulkit – bulk edit wordpress posts & pagesBulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery4.3 Medium
- plainware shiftcontroller, shiftcontroller employee shift scheduling +1 moreShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection7.5 High
- lizardbyte sunshine, sunshine for windows +1 moreA local privilege escalation vulnerability exists in LizardBytes' Sunshine for Windows7.8 High
- lizardbyte sunshineSunshine's unquoted executable path could lead to hijacked execution flow4.9 Medium
- netflix consolemeArbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE9.3 Critical
- watchguard authpoint password managerLocal Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari7.8 High
- ibm security guardiumIBM Security Guardium denial of service4.4 Medium
- lenovo printer, printers +1 moreA buffer overflow vulnerability was identified in some Lenovo printers that could allow an...7.5 High
- ibm aix, vios +1 moreIBM AIX command execution8.4 High
- shrubbery tac plus 2x, tac plus 3x, tac plus 4x +2 moreShrubbery tac_plus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command...9.8 Critical
- blockart magazine blocksWordPress Magazine Blocks plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- webvitaly iframeWordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webtoffee order export & order import for woocommerceWordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability4.4 Medium
- jch optimize project optimize, samuel marshall jch optimize +1 moreWordPress JCH Optimize plugin <= 4.2.0 - Path Traversal vulnerability4.3 Medium
- sonatype nexus repositoryNexus Repository 3 - Path Traversal7.5 High
- rockwell automation factorytalk® remote access™Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables7.0 High
- openssl, netapp 500f firmware, 8300 firmware +19 more +21 moreExcessive time spent checking DSA keys and parameters5.3 Medium
- stalwartlabs mail-serverStalwart Mail Server has privilege escalation by design9.1 Critical
- jwtk njwtnjwt Prototype Pollution vulnerability5.9 Medium
- mindersec minderDenial of service of Minder Server with attacker-controlled REST endpoint5.3 Medium
- rockwell automation factorytalk® view se, rockwellautomation factorytalk view +1 moreRockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability8.8 High
- ruby rexmlREXML contains a denial of service vulnerability5.3 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...5.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...6.5 Medium
- idccmsidccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal...3.8 Low
- sunhillo surelineSunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS...6.1 Medium
- cloudwise flyfishFlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the...7.5 High
- cisco confd, network services orchestrator, crosswork network services orchestrator +1 more +3 moreA vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could...7.8 High
- cisco confd, network services orchestrator, crosswork network services orchestrator +2 more +4 moreA vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could...7.8 High
- amtel same70, sams70, samv70 +9 more +11 moreVoltage glitch during startup of the EEFC NVM controller can bypass the security bit6.3 Medium
- dell unity, emlog pro, ligowave apc propeller +1 more +3 moreLigowave Unity/Pro/Mimo/APC Arbitrary Command Injection9.4 Critical
- asaancart simple php shopping cartSQL injection vulnerability in Simple PHP Shopping Cart9.3 Critical
- ansanwan siadminSQL injection vulnerability in SiAdmin6.3 Medium
- ansanwan siadminSQL injection vulnerability in SiAdmin9.8 Critical
- Show moreLoading…