CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise...7.2 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows account takeover via NTLM relay.8.8 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise...9.8 Critical
- ivanti epmm, endpoint manager mobile +1 moreA local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local...6.7 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated...6.7 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an...6.7 Medium
- lollms lollms-webui, parisneo parisneo/lollms-webui +1 moreRemote Code Execution in parisneo/lollms-webui8.4 High
- ibm iIBM Performance Tools for i privilege escalation7.4 High
- gstreamer, debian linux +1 moreGStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.3 Medium
- sante pacs server pg, pacs server, santesoft sante pacs server +2 moreSante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability9.8 Critical
- avira primeAvira Prime Link Following Local Privilege Escalation Vulnerability7.8 High
- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.3 Medium
- withsecure elements, elements endpoint protection, client security +2 more +4 moreWithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability7.3 High
- tileserver tileservergltileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability...6.1 Medium
vufind/vufindPackagistVuFind Server-Side Request Forgery (SSRF) vulnerability6.1 Medium- ibm app connect enterpriseIBM App Connect Enterprise information disclosure4.3 Medium
silverstripe/cmsPackagistSilverstripe SiteTree Creation Permission Vulnerability7.5 High- openlibraryfoundation vufindVuFind Server-Side Request Forgery (SSRF) vulnerability9.1 Critical
silverstripe/cmsPackagistSilverstripe XSS vulnerability via VirtualPage6.1 Medium- daprDapr API Token Exposure5.3 Medium
- ibm app connect enterpriseIBM App Connect Enterprise denial of service6.5 Medium
silverstripe/cmsPackagistSilverstripe History XSS Vulnerability6.1 Mediumsilverstripe/adminPackagistSilverstripe admin XSS Vulnerability via WYSIWYG editor3.8 Low- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection in ADAudit Plus4.7 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC)...8.8 High
- litespeedtech openlitespeedOpenLiteSpeed before 1.8.1 mishandles chunked encoding.5.3 Medium
- xmedcon medconxmedcon 0.23.0 and fixed in v.0.24.0 is vulnerable to Buffer Overflow via libs/dicom/basic.c...6.2 Medium
- progress moveit automationThe Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length6.1 Medium
- cisco adaptive security appliance, adaptive security appliance (asa) software, adaptive security appliance software +3 more +5 moreA vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security...5.8 Medium
- cisco adaptive security appliance, adaptive security appliance (asa) software, adaptive security appliance software +3 more +5 moreA vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN...5.0 Medium
- cisco firepower management center, firepower threat defense software, secure firewall management center +2 moreA vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower...5.8 Medium
- cisco firepower threat defense software, firepower management center, secure firewall threat defense +2 moreA vulnerability in the file policy feature that is used to inspect encrypted archive files of...5.8 Medium
- cisco snort, snort intrusion prevention system, firepower threat defense software +4 more +6 moreMultiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System ...5.8 Medium
- qlik senseQlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their...8.8 High
- commerce view receipt project view receipt, drupal commerce view receipt +1 moreCommerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-0215.3 Medium
- google lookerInsecure Direct Object Reference In Looker6.5 Medium
- drupal email contact, email contact project contact +1 moreEmail Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-0207.5 High
- ghostGhost allows CSV Injection during member CSV export8.8 High
- silverpeasSilverpeas Core vulnerable to Cross Site Scripting5.4 Medium
- vantage6vantage6 collaboration admins can extend their influence by expanding the collaboration2.7 Low
- shopex ecshopEcshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php.5.4 Medium
- insyde seg windows driverAn issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07...8.4 High
- nicomsoft wini2cAn issue in the component ddcdrv.sys of Nicomsoft WinI2C/DDC v3.7.4.0 allows attackers to...8.8 High
- wistron tbt force power cpntrolAn issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0...9.9 Critical
- dell realtek high definition audio driverAn issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtek(r) High Definition...7.8 High
- realtek io driverAn issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823...8.4 High
- asus gputweak iiAn issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows...8.8 High
- asus atszio driverAn issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows...8.4 High
- asus bios flash driverAn issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0...7.8 High
- Show moreLoading…