CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- linux, linux kernel +1 moreNFC: digital: fix possible memory leak in digital_tg_listen_mdaa()5.5 Medium
- linux, linux kernel +1 moreNFC: digital: fix possible memory leak in digital_in_send_sdd_req()5.5 Medium
- linux, linux kernel +1 moremlxsw: thermal: Fix out-of-bounds memory accesses7.3 High
- linux, linux kernel +1 morenet: encx24j600: check error in devm_regmap_init_encx24j6002.3 Low
- linux, linux kernel +1 morenet: dsa: microchip: Added the condition for scheduling ksz_mib_read_work5.5 Medium
- linux, linux kernel +1 morenet/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path7.1 High
- linux, linux kernel +1 moreiio: adis16475: fix deadlock on frequency set5.5 Medium
- linux, linux kernel +1 moreusb: musb: dsps: Fix the probe error path5.5 Medium
- linux, linux kernel +1 moredm: fix mempool NULL pointer race when completing IO4.7 Medium
- linux, linux kernel +1 morexhci: Fix command ring pointer corruption while aborting a command5.5 Medium
- linux, linux kernel +1 morebtrfs: fix abort logic in btrfs_replace_file_extents8.1 High
- dell bsafe crypto-c micro edition, bsafe micro edition suite, bsafe crypto-c-micro-edition +1 more +3 moreDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite,...5.1 Medium
- businessdirectoryplugin business directory, strategy11team business directory plugin – easy listing directories for wordpress +1 moreBusiness Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter9.8 Critical
- aruphash elegant addons for elementorElegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML tags6.4 Medium
- aruphash elegant addons for elementorElegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Switcher, Slider, and Iconbox Widgets6.4 Medium
- daveshine toolbar extras for elementor & more – wordpress admin bar enhancedToolbar Extras for Elementor & More – WordPress Admin Bar Enhanced <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress – WordPress LMS Plugin <= 4.2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- wpfactory download plugins and themes from dashboardPath traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior...6.5 Medium
- tp-link tapo, tether +1 moreTP-Link Tether versions prior to 4.5.13 and TP-Link Tapo versions prior to 3.3.6 do not properly...4.8 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.3.0.x series +2 moreCode injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12...6.6 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreCross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3...6.1 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreDirectory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1...6.5 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.3.0.x series +2 moreServer-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions...4.4 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreCross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3...5.4 Medium
- wpkoithemes wpkoi templates for elementorWPKoi Templates for Elementor <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Parameters6.4 Medium
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback5.0 Medium
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback5.0 Medium
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback5.0 Medium
ghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo score- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...8.1 High
- google chrome, fedoraproject fedora +1 moreUse after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...8.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreGnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate7.5 High
- apple ipados, safari, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 17...8.8 High
- apple ipados, macos, safari +7 more +9 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7...8.8 High
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS...8.8 High
- david lingren media library assistantMedia Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- david lingren media library assistantMedia Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang6.1 Medium
vimMageiaUpdated vim packages fix security vulnerabilityNo score- atlassian confluence data center, confluence server, crucible +4 more +6 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of...7.2 High
shopware/shopwarePackagistShopware Remote Code Execution Vulnerability9.8 Criticalshopware/shopwarePackagistShopware Remote Code Execution Vulnerability9.8 Criticalshopware/shopwarePackagistShopware Non-Persistent XSS in the Frontend6.1 Medium- lcds laquis scadaLCDS LAquis SCADA Path Traversal8.5 High
- marvintest solutions hardware access driverAn issue in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and before and fixed in v.5.0.4...7.8 High
- openbd bdclient spotOpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies...3.9 Low
- No product listedA Stored Cross-site Scripting (XSS) vulnerability in the "Import of organizational units and...4.3 Medium
- Show moreLoading…