CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- properfraction profilepress, paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress +1 moreProfilePress <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widget6.4 Medium
opensslUbuntuopenssl updateNo score- thales luna eftNetwork Key Transfer with AES KHT vulnerability in Luna EFT5.9 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- wpo365 | seamless wordpress + microsoft integration (wpo365 | login)WordPress + Microsoft Office 365 / Azure AD | LOGIN <= 27.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via pintra Shortcode6.4 Medium
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()8.8 High
- linux, linux kernel +1 moreBluetooth: msft: fix slab-use-after-free in msft_do_close()7.8 High
- linux, linux kernel +1 moreBluetooth: HCI: Fix potential null-ptr-deref5.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- huashi private cloud cdn live streaming acceleration serverHuashi Private Cloud CDN Live Streaming Acceleration Server ipconfig_new.php os command injection5.1 Medium
- brechtvds wp ultimate post gridWP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode6.4 Medium
- atarim visual collaboration, wpfeedback atarim – visual feedback, review & ai collaboration +1 moreVisual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials7.5 High
- sharethis share buttonsShareThis Share Buttons <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode6.4 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System unread_msg.php sql injection5.3 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.0 High
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable_update_form.php sql injection5.3 Medium
- apereo cas, central authentication service +1 moreCAS <= 1.0.0 - Unauthenticated SSRF9.1 Critical
- apereo casCAS <= 1.0.0 - Unauthenticated Arbitrary File Access7.5 High
- flattrFlattr <= 1.2.2 - Admin+ Stored XSS3.5 Low
- dianakcury pet managerPet Manager <= 1.4 - Contributor+ Stored XSS4.8 Medium
- diana k cury pet managerPet Manager <= 1.4 - Reflected XSS6.1 Medium
- foysal imran idonateIDonate <= 1.9.0 - Admin+ Stored XSS8.7 High
- unknown button contact vr, buttonizer call \/ chat \/ contact button +1 moreButton contact VR <= 4.7 - Admin+ Stored XSS3.5 Low
- hashthemes hash elementsHash Elements <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets6.4 Medium
- emrevona wp fastest cache – wordpress cache pluginWP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) Arbitrary File Deletion7.2 High
- brizy, themefusecom brizy – page builder +1 moreBrizy – Page Builder <= 2.4.43 - Missing Authorization4.3 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.17 - Missing Authorization4.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable_insert_form.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System timetable_grade_wise.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_invoice1.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_invoice.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_history1.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_details3.php sql injection5.3 Medium
- oxygen builder builder, soflyy oxygen +1 moreOxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution8.8 High
- rometheme romethemeform for elementor, rtmform builder +1 moreRomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate5.3 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_details2.php sql injection5.3 Medium
- campcodes complete web-based school management systemCampcodes Complete Web-Based School Management System teacher_salary_details.php sql injection5.3 Medium
- wpdatatables – wordpress data table, dynamic tables & table charts pluginwpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import4.7 Medium
- envaysoft fleetcartEnvaySoft FleetCart information disclosure6.9 Medium
- javs viewerMalicious Code in Justice AV Solutions (JAVS) Viewer8.7 High
- legalweb wp dsgvo tools (gdpr)WP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- mohsinrasool paypal pay now, buy now, donation and cart buttons shortcodePayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- webvitaly iframeiframe <= 5.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode5.0 Medium
- baden03 jquery t(-) countdown widgetjQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode6.4 Medium
- themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 moreWPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery5.3 Medium
- rafiul17 awesome contact form7 for elementorAwesome Contact Form7 for Elementor <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via AEP Contact Form 7 Widget6.4 Medium
- veeam agent, agent for windows +1 moreAn authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local...7.8 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows high-privileged users to read backup session logs.2.7 Low
- Show moreLoading…