CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- asus aisuite3, ai suite +1 moreAn issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows...8.8 High
- asus sabertooth x99 driver, sabertooth x99 firmware +1 moreAn issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0...7.8 High
- asus usb3.0 boost storage driverAn issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver...7.8 High
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes6.4 Medium
- webidsupport webidWeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php.9.8 Critical
- openkmA Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on...6.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...5.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...4.3 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...5.5 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...6.3 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...5.4 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.3 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...4.3 Medium
- idccmsidccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...6.3 Medium
- themehunk lead form builder & contact formResponsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution5.4 Medium
- arris vap2500, vap2500 firmware +1 moreArris VAP2500 tools_command.php command injection5.1 Medium
- byron gitoxidegix refs and paths with reserved Windows device names access the devices5.4 Medium
- byron gitoxidegix traversal outside working tree enables arbitrary code execution8.8 High
- linux, linux kernel +1 moreigb: Fix string truncation warnings in igb_set_fw_version5.5 Medium
- arris vap2500, vap2500 firmware +1 moreArris VAP2500 diag_s.php command injection5.1 Medium
- arris vap2500, vap2500 firmware +1 moreArris VAP2500 assoc_table.php command injection5.1 Medium
- ritlabs tinyweb, tinyweb server +1 moreRitlabs TinyWeb Server Request crlf injection6.9 Medium
- piotnetdotcom piotnet addons for elementorPiotnet Addons For Elementor <= 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Attributes6.4 Medium
- caseproof memberpressMemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter6.4 Medium
- caseproof memberpressMemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode8.5 High
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode6.4 Medium
- trustyplugins country state city dropdown cf7Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection9.8 Critical
- farhan noor applyonline – application form builder and managerApplyOnline – Application Form Builder and Manager <= 2.6.2 - Missing Authorization to Sensitive Information Exposure4.3 Medium
- wpbean wpb elementor addons, wpb addons for elementor – news ticker, timeline, team & more widgets +1 moreWPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter6.4 Medium
- linux, linux kernel +1 moredm rq: don't queue request to blk-mq during DM suspend5.5 Medium
- linux, linux kernel +1 morenvmem: Fix shift-out-of-bound (UBSAN) with byte size cells7.8 High
- linux, linux kernel +1 morenet/tls: Fix flipped sign in tls_err_abort() calls9.8 Critical
- linux, linux kernel +1 moreusbnet: sanity check for maxpacket5.5 Medium
- linux, linux kernel +1 morecfg80211: fix management registrations locking7.8 High
- linux, linux kernel +1 moreocfs2: fix race between searching chunks and release journal_head from buffer_head7.8 High
- linux, linux kernel +1 moremm, thp: bail out early in collapse_file for writeback page7.8 High
- linux, linux kernel +1 moremm: khugepaged: skip huge page collapse for special files5.5 Medium
- linux, linux kernel +1 moredrm/ttm: fix memleak in ttm_transfered_destroy5.5 Medium
- debian linux, linux kernel +1 moredrm/amdgpu: Fix even more out of bound writes from debugfs7.8 High
- linux, linux kernel +1 moreriscv, bpf: Fix potential NULL dereference7.5 High
- linux, linux kernel +1 moreIB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields7.8 High
- linux, linux kernel +1 moreocteontx2-af: Fix possible null pointer dereference.5.5 Medium
- linux, linux kernel +1 moreregmap: Fix possible double-free in regcache_rbtree_exit()7.8 High
- linux kernel, linux +1 morenet: batman-adv: fix error handling5.3 Medium
- linux, linux kernel +1 moreRDMA/mlx5: Initialize the ODP xarray when creating an ODP MR5.5 Medium
- linux, linux kernel +1 morescsi: core: Put LLD module refcnt after SCSI device is released5.5 Medium
- Show moreLoading…