CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86/mm/pat: fix VM_PAT handling in COW mappings5.5 Medium
- linux, linux kernel +1 morex86/coco: Require seeding RNG with RDRAND on CoCo systems8.4 High
- linux, linux kernel +1 moreaio: Fix null ptr deref in aio_complete() wakeup7.8 High
- linux, linux kernel +1 moreriscv: Fix vector state restore in rt_sigreturn()5.5 Medium
- linux, linux kernel +1 moremm/secretmem: fix GUP-fast succeeding on secretmem folios7.8 High
- debian linux, linux kernel +1 moreriscv: process: Fix kernel gp leakage7.1 High
- linux, linux kernel +1 moresmb: client: fix UAF in smb2_reconnect_server()9.8 Critical
- linux, linux kernel +1 moresmb: client: guarantee refcounted children from parent session9.8 Critical
- linux, linux kernel +1 moresmb: client: fix potential UAF in cifs_stats_proc_write()7.8 High
- debian linux, linux kernel +1 moresmb: client: fix potential UAF in cifs_stats_proc_show()7.8 High
- debian linux, linux kernel +1 moresmb: client: fix potential UAF in cifs_dump_full_key()7.8 High
- linux, linux kernel +1 moresmb: client: fix potential UAF in smb2_is_valid_oplock_break()9.8 Critical
- linux, linux kernel +1 moresmb: client: fix potential UAF in smb2_is_valid_lease_break()9.8 Critical
- linux, linux kernel +1 moresmb: client: fix potential UAF in is_valid_oplock_break()9.8 Critical
- linux, linux kernel +1 moresmb: client: fix potential UAF in smb2_is_network_name_deleted()9.8 Critical
- linux, linux kernel +1 moresmb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()9.8 Critical
- linux, linux kernel +1 morebpf: support deferring bpf_link dealloc to after RCU grace period7.8 High
- argie simple inventory systemSourceCodester Simple Inventory System updateprice.php sql injection5.3 Medium
- argie simple inventory system, simple inventory system project inventory system +1 moreSourceCodester Simple Inventory System login.php sql injection5.1 Medium
- argie simple inventory system, simple inventory system project inventory system +1 moreSourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgery6.9 Medium
- hipcam deviceHipcam Device MAC Address wifi.mac information disclosure6.9 Medium
- victor zsviot cameraVictor Zsviot Camera MQTT Packet denial of service7.1 High
- kiteworks totemomailKiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId...9.8 Critical
- kiteworks totemomailKiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient...6.1 Medium
nixDebianNix through 2.22.1 mishandles certain usage of hash caches, which makes it easier for attackers...4.3 Medium- mayurik best house rental management systemSourceCodester Best House Rental Management System view_payment.php sql injection6.9 Medium
- No product listedquestion_image.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the...6.1 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System login.php sql injection6.9 Medium
- aio-libs aiosmtpdSTARTTLS unencrypted commands injection5.4 Medium
- ibm iIBM i denial of service7.5 High
- msi afterburnerMSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass7.8 High
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- piotnetdotcom piotnet addons for elementorPiotnet Addons For Elementor <= 2.4.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- uapp testimonial carousel for elementorTestimonial Carousel For Elementor <= 10.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation7.5 High
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation9.8 Critical
- themenectar salient coreSalient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode7.5 High
- themenectar salient shortcodesSalient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- themenectar salient shortcodes, salient core +1 moreSalient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8 High
- valvepress wordpress automatic pluginWordPress Automatic <= 3.94.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter6.4 Medium
- wpdeveloper essential blocks, wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patterns +1 moreEssential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- detheme dethemekit for elementorDethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter6.4 Medium
- berriai berriai/litellm, litellm +1 moreRemote Code Execution in berriai/litellm9.8 Critical
- qt, qt network authorization, fedoraproject fedora +2 moreQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through...9.8 Critical
- hcl software bigfix platformHCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation5.9 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to Cross-Site Request Forgery5.7 Medium
- Show moreLoading…