CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- linux, linux kernel +1 morestaging: rtl8712: fix use-after-free in rtl8712_dl_fw7.0 High
- linux, linux kernel +1 moreisofs: Fix out of bound access for corrupted isofs image9.1 Critical
- linux, linux kernel +1 morecomedi: dt9812: fix DMA buffers on stack7.8 High
- linux, linux kernel +1 morecomedi: ni_usb6501: fix NULL-deref in command paths4.6 Medium
- linux, linux kernel +1 morecomedi: vmk80xx: fix transfer-buffer overflows7.8 High
- linux, linux kernel +1 morecomedi: vmk80xx: fix bulk-buffer overflow7.8 High
- i-plug inc. 'offerbox' app for android, 'offerbox' app for ios, iplug offerbox app for android +1 more +3 more'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to...7.5 High
- wpzoom addons for elementor, addons for elementor – starter templates & widgets, elementor addons +2 moreWPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File Inclusion9.8 Critical
- wpopal opal estate pro – property management and submission, opal estate pro +1 moreOpal Estate Pro – Property Management and Submission <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fluentforms contact form, techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builder +1 moreContact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues7.5 High
- theluckywp luckywp table of contentsLuckyWP Table of Contents <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting5.5 Medium
- theluckywp luckywp table of contentsLuckyWP Table of Contents <= 2.1.5 - Reflected Cross-Site Scripting6.1 Medium
- theluckywp luckywp table of contentsLuckyWP Table of Contents <= 2.1.5 - Authenticated (Administrator+) Cross-Site Scripting4.4 Medium
- ninja team beaver add-ons for beaver builder, njba ninja beaver add-ons for beaver builder +1 moreNinja Beaver Add-ons for Beaver Builder <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets6.4 Medium
- juangirini automatic translator with google translateAutomatic Translator with Google Translate <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Font4.4 Medium
- baden03 print-o-maticPrint-O-Matic <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- spyrosvl wp font awesome share iconsWP Font Awesome Share Icons <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- nextscripts nextscripts: social networks auto-poster, social networks auto poster +1 moreNextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure8.5 High
- nextscripts nextscripts: social networks auto-poster, social networks auto poster +1 moreNextScripts: Social Networks Auto-Poster <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting via User Agent6.1 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass5.3 Medium
- nextscripts nextscripts: social networks auto-poster, social networks auto poster +1 moreNextScripts: Social Networks Auto-Poster <= 4.4.3 - Cross-Site Request Forgery to Arbitrary Post Deletion5.4 Medium
- rico-macchi wp scraperWP Scraper <= 5.7 - Missing Authorization to Arbitrary Page/Post Creation4.3 Medium
- linux, linux kernel +1 morescsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()5.5 Medium
- linux, linux kernel +1 moredrm: mxsfb: Fix NULL pointer dereference crash on unload5.5 Medium
- linux, linux kernel +1 moremm, slub: fix potential use-after-free in slab_debugfs_fops7.8 High
- linux, linux kernel +1 moreisdn: mISDN: Fix sleeping function called from invalid context5.5 Medium
- linux, linux kernel +1 morekunit: fix reference count leak in kfree_at_end5.3 Medium
- linux, linux kernel +1 moremm, slub: fix potential memoryleak in kmem_cache_open()5.5 Medium
- linux, linux kernel +1 moreKVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()7.1 High
- linux, linux kernel +1 moreaudit: fix possible null-pointer dereference in audit_filter_rules7.4 High
- linux, linux kernel +1 moremm/secretmem: fix NULL page->mapping dereference in page_is_secretmem()5.5 Medium
- linux, linux kernel +1 moremm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()5.5 Medium
- linux, linux kernel +1 moreuserfaultfd: fix a race between writeprotect and exit_mmap()7.8 High
- linux, linux kernel +1 moreocfs2: fix data corruption after conversion from inline format5.5 Medium
- linux, linux kernel +1 morecan: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv7.8 High
- linux, linux kernel +1 moreocfs2: mount fails with buffer overflow in strlen7.1 High
- linux, linux kernel +1 morecan: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()5.5 Medium
- linux, linux kernel +1 morecan: peak_pci: peak_pci_remove(): fix UAF8.4 High
- linux, linux kernel +1 moreptp: Fix possible memory leak in ptp_clock_register()5.5 Medium
- linux, linux kernel +1 morepowerpc/smp: do not decrement idle task preempt count in CPU offline5.5 Medium
- linux, linux kernel +1 moreice: Avoid crash from unnecessary IDA free5.5 Medium
- linux, linux kernel +1 morenetfilter: nf_tables: skip netdev events generated on netns removal5.5 Medium
- linux, linux kernel +1 morenetfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value7.8 High
- linux, linux kernel +1 moreKVM: arm64: Fix host stage-2 PGD refcount8.8 High
- linux, linux kernel +1 moreice: fix locking for Tx timestamp tracking flush7.1 High
- linux, linux kernel +1 moremptcp: fix possible stall on recvmsg()7.5 High
- linux, linux kernel +1 moredrm/msm/a3xx: fix error handling in a3xx_gpu_init()7.8 High
- linux, linux kernel +1 moredrm/msm/a4xx: fix error handling in a4xx_gpu_init()7.8 High
- linux, linux kernel +1 moredrm/msm: Fix null pointer dereference on pointer edp5.5 Medium
- linux, linux kernel +1 moredrm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read5.5 Medium
- Show moreLoading…