CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- lunary, lunary-ai lunary-ai/lunary +1 moreMissing Authorization on Delete Datasets in lunary-ai/lunary9.1 Critical
- itsourcecode directory management systemPHPGurukul Directory Management System index.php sql injection6.9 Medium
- remyandrade electricity consumption monitoring toolSourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection5.3 Medium
- event registration system project registration system, oretnom23 event registration system +1 moreSourceCodester Event Registration System cross site scripting6.9 Medium
- oretnom23 event registration systemSourceCodester Event Registration System sql injection6.9 Medium
- oretnom23 event registration systemSourceCodester Event Registration System cross site scripting5.3 Medium
- event registration system project registration system, oretnom23 event registration system +1 moreSourceCodester Event Registration System sql injection5.3 Medium
- aioseo all in one seoAll in One SEO < 4.6.1.1 - Contributor+ Stored XSS6.1 Medium
- oretnom23 event registration systemSourceCodester Event Registration System sql injection5.3 Medium
- oretnom23 event registration systemSourceCodester Event Registration System login.php sql injection6.9 Medium
- oretnom23 event registration systemSourceCodester Event Registration System portal.php sql injection6.9 Medium
- campcodes online examination systemSourceCodester Online Examination System save.php sql injection6.9 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_profile.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_attendance_history1.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_profile1.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_profile.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_invoice1.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_invoice.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_history.php sql injection5.3 Medium
javaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details4.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details2.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details3.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_payment_details.php sql injection5.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDenial of Service in mintplex-labs/anything-llm4.9 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_grade_wise.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System student_first_payment.php sql injection5.3 Medium
- westernmo edw 100Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded...9.8 Critical
- westermo edw-100Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a...9.8 Critical
- zammadIn Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file...6.7 Medium
- syslifters sysreptorSyslifters SysReptor before 2024.40 has a CSRF vulnerability for WebSocket connections.8.8 High
- No product listedtine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain...7.5 High
- linuxmint mintuploadIn the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command...9.0 Critical
- argie simple inventory systemSourceCodester Simple Inventory System updateproduct.php sql injection5.3 Medium
- argie simple inventory systemSourceCodester Simple Inventory System tableedit.php sql injection5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moredyndbg: fix old BUG_ON in >control parser5.5 Medium
- linux, linux kernel +1 morewifi: rtw89: fix null pointer access when abort scan5.5 Medium
- linux, linux kernel +1 morenet: phy: phy_device: Prevent nullptr exceptions on ISR5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreVMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()5.5 Medium
- linux, linux kernel +1 morepmdomain: ti: Add a null pointer check to the omap_prm_domain_init5.5 Medium
- linux, linux kernel +1 morepmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morepstore/zone: Add a null pointer check to the psz_kmsg_read5.5 Medium
- linux, linux kernel +1 moredma-direct: Leak pages on dma_set_decrypted() failure9.3 Critical
- linux, linux kernel +1 morewifi: ath11k: decrease MHI channel buffer length to 8KB5.5 Medium
- debian linux, linux kernel +1 morewifi: cfg80211: check A-MSDU format more carefully8.1 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: send: handle path ref underflow in header iterate_inode_ref()3.3 Low
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: btintel: Fix null ptr deref in btintel_read_version5.5 Medium
- linux, linux kernel +1 moredrm/vc4: don't check if plane->state->fb == state->fb7.8 High
- Show moreLoading…