CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
shopware/shopwarePackagistShopware Remote Code Execution Vulnerability9.8 Critical- rti connext professional, connext dds professional +1 moreIn RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing...7.3 High
sensiolabs/connectPackagistsensiolabs/connect has a Cross-Site Request Forgery Vulnerability6.1 Mediumscheb/two-factor-bundlePackagistscheb/two-factor-bundle bypass two-factor authentication with remember-me option7.4 Highscheb/two-factor-bundlePackagistscheb/two-factor-bundle bypass two-factor authentication with unverified JWT trusted device token7.4 High- fastify session@fastify/session reuses destroyed session cookie7.4 High
- argoproj argo cd, argo-cd +1 moreArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache9.1 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Synchronization in lunary-ai/lunary7.1 High
- terabyte unlimited imageAn issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0...7.8 High
- qdocs smart schoolQDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code...6.1 Medium
- vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 moreThe vCenter Server contains a partial file read vulnerability. A malicious actor with...4.9 Medium
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 moreThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious...7.2 High
- vmware esxi, fusion, workstation +2 more +4 moreThe storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write...8.1 High
- rarlab winrarRARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI...7.5 High
- qnap qts, quts hero +1 moreQTS, QuTS hero7.2 High
- qnap qts, quts hero +1 moreQTS, QuTS hero6.4 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero6.4 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero7.2 High
- qnap qts, quts hero +1 moreQTS, QuTS hero6.4 Medium
- hypr passwordlessImproper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows...5.6 Medium
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS)...6.1 Medium
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The product does not neutralize or incorrectly...5.3 Medium
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The server does not properly handle application...5.3 Medium
- italtel embraceAn issue was discovered in Italtel Embrace 1.6.4. The web application inserts cleartext passwords...6.5 Medium
- linux, linux kernel +1 moretracing: Have trace_event_file have ref counters7.8 High
- linux, linux kernel +1 morecan: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()5.5 Medium
- linux, linux kernel +1 moreclk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data5.5 Medium
- linux, linux kernel +1 moreclk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data5.5 Medium
- linux, linux kernel +1 morex86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro7.1 High
- linux, linux kernel +1 moreclk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data5.5 Medium
- linux, linux kernel +1 moretty: n_gsm: fix race condition in status line change on dead connections7.8 High
- linux, linux kernel +1 moresoc: qcom: llcc: Handle a second device without data corruption7.1 High
- linux, linux kernel +1 moreclk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data4.1 Medium
- linux, linux kernel +1 morepstore/platform: Add check for kstrdup5.5 Medium
- linux, linux kernel +1 morethermal: core: prevent potential string overflow7.8 High
- linux, linux kernel +1 moredrm/radeon: possible buffer overflow7.1 High
- linux, linux kernel +1 moreHID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()7.1 High
- linux, linux kernel +1 moreclk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data5.5 Medium
- linux, linux kernel +1 moreplatform/x86: wmi: Fix opening of char device7.0 High
- linux, linux kernel +1 morehwmon: (axi-fan-control) Fix possible NULL pointer dereference5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Fix null pointer dereference in error message4.1 Medium
- linux, linux kernel +1 moredrm: bridge: it66121: Fix invalid connector dereference6.2 Medium
- linux, linux kernel +1 moredrivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process5.5 Medium
- linux, linux kernel +1 moreperf: hisi: Fix use-after-free when register pmu fails7.8 High
- linux, linux kernel +1 moreclk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data6.2 Medium
- linux, linux kernel +1 moredrm/mediatek: Fix coverity issue with unintentional integer overflow5.5 Medium
- linux, linux kernel +1 moredrm/bridge: lt8912b: Fix crash on bridge detach5.5 Medium
- linux, linux kernel +1 moreusb: dwc2: fix possible NULL pointer dereference caused by driver concurrency5.5 Medium
- linux, linux kernel +1 morepadata: Fix refcnt handling in padata_free_shell()7.8 High
- Show moreLoading…