CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- linux, linux kernel +1 morebtrfs: fix deadlock with fiemap and extent locking5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Stop parsing channels bits when all channels are found.5.5 Medium
- linux, linux kernel +1 morenvme: fix reconnection fail due to reserved tag allocation7.5 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: don't set the MFP flag for the GTK7.1 High
- linux, linux kernel +1 moreclk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()7.8 High
- linux, linux kernel +1 morenet: ethernet: mtk_eth_soc: fix PPE hanging issue5.5 Medium
- linux, linux kernel +1 moremedia: rkisp1: Fix IRQ handling due to shared interrupts5.5 Medium
- linux, linux kernel +1 morex86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type5.5 Medium
- apache friends xamppVulnerability of uncontrolled resource consumption in XAMPP7.5 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecpumap: Zero-initialise xdp_rxq_info struct before running XDP program7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetrom: Fix data-races around sysctl_net_busy_read4.7 Medium
- linux, linux kernel +1 moreRevert "net/mlx5: Block entering switchdev mode with ns inconsistency"5.5 Medium
- dfinity stable structures, internet computer ic-stable-structures +1 moreBTreeMap memory leak when deallocating nodes with overflows5.9 Medium
- linux, linux kernel +1 morenet: mctp: take ownership of skb in mctp_local_output5.5 Medium
- debian linux, linux kernel +1 moreipv6: fix potential "struct net" leak in inet6_rtm_getaddr()5.5 Medium
- debian linux, linux kernel +1 moreBluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST8.8 High
- linux, linux kernel +1 morenetfilter: bridge: confirm multicast packets before passing them up the stack8.8 High
- debian linux, linux kernel +1 morertnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back7.8 High
- debian linux, linux kernel +1 moreefi/capsule-loader: fix incorrect allocation size5.5 Medium
- debian linux, linux kernel +1 morepower: supply: bq27xxx-i2c: Do not free non existing IRQ5.5 Medium
- linux, linux kernel +1 moredrm/nouveau: keep DMA buffers required for suspend/resume7.8 High
- debian linux, linux kernel +1 morewifi: nl80211: reject iftype change with mesh ID change7.8 High
- linux, linux kernel +1 moredmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup7.8 High
- linux, linux kernel +1 moredmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup7.8 High
- linux, linux kernel +1 moreRevert "drm/amd/pm: resolve reboot exception for si oland"5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Fixed overflow check in mi_enum_attr()7.8 High
- linux, linux kernel +1 morelib/Kconfig.debug: TEST_IOV_ITER depends on MMU5.5 Medium
- debian linux, linux kernel +1 moreusb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs7.5 High
- linux, linux kernel +1 moremptcp: fix data races on remote_id8.2 High
- linux, linux kernel +1 morenetfilter: nft_flow_offload: reset dst in route object after setting up flow7.8 High
- linux, linux kernel +1 morephonet/pep: fix racy skb_queue_empty() use5.8 Medium
- emlogEmlog Pro Cookie improper authentication6.3 Medium
- emlog, emlog pro project pro +1 moreEmlog Pro setting.php unrestricted upload5.1 Medium
- flothemes flo formsWordPress Flo Forms plugin <= 1.0.42 - Broken Access Control vulnerability5.3 Medium
- zabbix, zabbix server +1 moreTime Based SQL Injection in Zabbix Server Audit Log9.1 Critical
- crm perks integration for contact form 7 and salesforceWordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- crm perks integration for contact form 7 hubspot, crmperks integration for constant contact and contact form 7\, wpforms\, elementor\, ninja +1 moreWordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- creative motion clearfy cacheWordPress Clearfy Cache plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- codebard fast custom social share by codebard, fast custom social share +1 moreWordPress Fast Custom Social Share by CodeBard plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- extend themes empowerwpWordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- booking ultra pro ultra pro, deetronix booking ultra pro, bookingultrapro booking ultra pro appointments booking calendar +2 moreWordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerability8.8 High
- sirvWordPress Sirv plugin <= 7.2.2 - Arbitrary Option Update to Privilege Escalation vulnerability8.8 High
- themekraft buddyformsWordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability8.6 High
- cerberus ftp enterprise ftp enterprise, cerberus ftp server +1 moreResource consumption vulnerability in Cerberus FTP Enterprise7.5 High
- rafflepress giveaways and contests, giveaways and contests by rafflepress +1 moreWordPress Giveaways and Contests by RafflePress plugin <= 1.12.7 - IP Restriction Bypass vulnerability5.3 Medium
- activedemand online agency marketing automation activedemandWordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability10.0 Critical
- wordplus bp better messagesWordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability5.3 Medium
- royal-elementor-addons royal elementor addons, wproyal royal elementor addons and templates +1 moreWordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability5.3 Medium
- metagauss profilegridWordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability4.3 Medium
- codepeople appointment hour bookingWordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability5.3 Medium
- Show moreLoading…