CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
pusher/pusher-php-serverPackagistPusher Service Channel Authentication Bypass6.5 Medium- likeshopSQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint…8.2 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.8.3 High
propel/propel1Packagistpropel/propel1 SQL injection possible with limit() on MySQL9.8 Critical- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports...8.3 High
propel/propelPackagistPropel2 SQL injection possible with limit() on MySQL9.8 Critical- lkw199711 smangasmanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting...7.5 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...8.0 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function...5.2 Medium
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...7.7 High
- miguelcastillo bit-loaderMiguelCastillo @bit/loader Prototype Pollution issue8.8 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- waxlab waxBuffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a...7.5 High
- apidevtools json-schema-ref-parserjson-schema-ref-parser Prototype Pollution issue8.1 High
phpxmlrpc/extrasPackagistphpxmlrpc/extra XSS in class documenting_xmlrpc_server6.1 Mediumpassbolt/passbolt_apiPackagistPassbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"5.5 Mediumpassbolt/passbolt_apiPackagistPassbolt API Stored XSS on first/last name during setup7.2 High- asus expertwifi, rt-ac67u, rt-ac68r +13 more +15 moreASUS OVPN RCE7.2 High
passbolt/passbolt_apiPackagistPassbolt Api Remote code execution8.1 Highpassbolt/passbolt_apiPackagistPassbolt Api Retrieval of HTTP-only cookies3.7 Lowpassbolt/passbolt_apiPackagistPassbolt Api E-mail HTML injection4.4 Medium- blackprint engineBlackprint @blackprint/engine Prototype Pollution issue9.8 Critical
- quanxun huiju network technology ik-q3000An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64...7.5 High
- No product listedQuanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was...9.4 Critical
oro/platformPackagistOroPlatform Forced Redirect to External Website6.1 Mediumoro/crmPackagistOroCRM Forced Redirect to External Website6.1 Medium- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary8.3 High
- opentext arcsight enterprise security manager, arcsight platform +1 moreOpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS8.7 High
- opentext arcsight enterprise security manager, arcsight platform +1 moreOpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS8.7 High
- taurusxin ncmdumpAn issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via...7.5 High
- No product listedtaurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt:...5.0 Medium
- manageengine pam360, zohocorp manageengine pam360 +1 moreAuthorization vulnerability in PAM3608.1 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Input Validation in mintplex-labs/anything-llm8.1 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreZoho ManageEngine ADAudit Plus through 7251 allows SQL Injection while getting aggregate report...8.3 High
- fluent bit bit, fluentbit fluent bit +1 moreFluent Bit Memory Corruption Vulnerability9.8 Critical
- linux, linux kernel +1 moreax25: Fix netdev refcount issue7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moreipv4: check for NULL idev in ip_route_use_hint()5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moremlxsw: spectrum_acl_tcam: Fix warning during rehash7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 moremlxsw: spectrum_acl_tcam: Fix incorrect list API usage5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenetfilter: nf_tables: honor table dormant flag from netdev release event path5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morei40e: Do not use WQ_MEM_RECLAIM flag for workqueue5.5 Medium
- linux, linux kernel +1 moreice: fix LAG and VF lock dependency in ice_reset_vf()5.5 Medium
- linux, linux kernel +1 moredpll: fix dpll_pin_on_pin_register() for multiple parent pins5.5 Medium
- linux, linux kernel +1 morenetfs: Fix the pre-flush when appending to a file in writethrough mode7.8 High
- linux, linux kernel +1 moremm/hugetlb: fix missing hugetlb_lock for resv uncharge5.5 Medium
- linux, linux kernel +1 moresmb3: missing lock when picking channel7.5 High
- linux, linux kernel +1 moresmb3: fix lock ordering potential deadlock in cifs_sync_mid_result7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morecpu: Re-enable CPU mitigations by default for !X86 architectures5.5 Medium
- Show moreLoading…