CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
paragonie/random_compatPackagistrandom_compat Uses insecure CSPRNGNo scoreonelogin/php-samlPackagistonelogin/php-saml signature wrapping attacksNo scoreonelogin/php-samlPackagistonelogin/php-saml Improper signature validation on LogoutRequest/LogoutResponse.No scorenzo/url-encryptor-bundlePackagistnzo/url-encryptor-bundle Insecure default secret key and IV allowing anyone to decrypt valuesNo scoreneos/swiftmailerPackagistFlow Swift Mailer package Remote code executionNo score- hcl software bigfix platformHCL BigFix Platform is susceptible to insufficiently protected credentials6.7 Medium
neos/neosPackagistCross-site Scripting vulnerabilities in NeosNo scoreneos/neosPackagistPrivilege Escalation in TYPO3 Neos4.2 Mediumneos/flowPackagistTime-Based Information Disclosure Vulnerability in Flow5.3 Mediumneos/neosPackagistNeos Information Disclosure Security Note7.5 Highneos/flowPackagistNeos Flow Information disclosure in entity security4.3 Mediumneos/flowPackagistNeos Flow Arbitrary file upload and XML External Entity processingNo scoreneos/flowPackagistInsecure deserialize Vulnerability in FLOW33.7 Lownamshi/josePackagistnamshi/jose - Verification bypassNo scorenamshi/josePackagistnamshi/jose insecure JSON Web Signatures (JWS)No score- simple online mens salon management system project online mens salon management system, sourcecodester simple online mens salon management system, oretnom23 simple online men\'s salon management system +2 moreSourceCodester Simple Online Mens Salon Management System view_service.php sql injection5.3 Medium
- ieee 802.11 wireless protocolThe IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an...7.4 High
- phpgurukul online course registration systemPHPGurukul Online Course Registration System pincode-verification.php sql injection5.3 Medium
- phpgurukul online course registration systemPHPGurukul Online Course Registration System sql injection6.9 Medium
- dedecmsDedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php.5.5 Medium
- mozilla focus for ios, firefox focus +1 moreThe file scheme of URLs would be hidden, resulting in potential spoofing of a website's address...4.4 Medium
- micro focus operations bridge reporterPotential SQL injection in OpenText Operations Bridge Reporter7.2 High
- phpgurukul online course registration systemPHPGurukul Online Course Registration System news-details.php sql injection6.9 Medium
- phpgurukul online course registration systemPHPGurukul Online Course Registration System index.php sql injection6.9 Medium
- tenable nessus agentRace Condition8.2 High
- tenable nessus agentPrivilege Escalation7.8 High
- asteriskAsterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests5.8 Medium
- dassault systèmes 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x5.4 Medium
- tenable nessusRace Condition8.2 High
- tenable nessusWhen installing Nessus to a directory outside of the default location on a Windows host, Nessus...7.8 High
- solarized firedown browser and downloaderThe com.solarized.firedown (aka Solarized FireDown Browser & Downloader) application 1.0.76 for...6.3 Medium
- dell cpg bios, edge gateway 3000 firmware, edge gateway 5000 firmware +56 more +58 moreDell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious...7.5 High
- devolutions serverImproper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and...6.5 Medium
- rocketsoft rocket lmsA cross-site scripting (XSS) vulnerability in Rocketsoft Rocket LMS 1.9 allows an administrator...4.8 Medium
- linux, linux kernel +1 moreblock: fix module reference leakage from bdev_open_by_dev error path5.5 Medium
- linux, linux kernel +1 morenet: bcmasp: fix memory leak when bringing down interface7.8 High
- linux, linux kernel +1 moreicmp: prevent possible NULL dereferences from icmp_build_probe()7.5 High
- linux, linux kernel +1 moreBluetooth: btusb: mediatek: Fix double free of skb in coredump8.8 High
- linux, linux kernel +1 moremlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update7.8 High
- debian linux, linux kernel +1 moremlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash7.8 High
- debian linux, linux kernel +1 moremlxsw: spectrum_acl_tcam: Fix memory leak during rehash6.4 Medium
- linux, linux kernel +1 moremlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work5.5 Medium
- linux, linux kernel +1 moreBluetooth: qca: fix NULL-deref on non-serdev suspend5.5 Medium
- linux, linux kernel +1 moreBluetooth: qca: fix NULL-deref on non-serdev setup5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: fix information leak in btrfs_ioctl_logical_to_ino()7.1 High
- debian linux, linux kernel +1 moreeeprom: at24: fix memory corruption race condition7.0 High
- debian linux, linux kernel +1 moreirqchip/gic-v3-its: Prevent double free on error7.8 High
- linux, linux kernel +1 moremm: zswap: fix shrinker NULL crash with cgroup_disable=memory5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: iwlwifi: dbg-tlv: ensure NUL termination9.1 Critical
- linux, linux kernel +1 moref2fs: compress: fix reserve_cblocks counting error when out of space5.5 Medium
- Show moreLoading…