CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function...9.8 Critical
silverstripe/frameworkPackagistSilverstripe X-Forwarded-Host request hostname injection7.2 High- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function...6.3 Medium
- hp w1a75a firmware, w1a76a firmware, w1a77a firmware +6 more +8 moreA user with device administrative privileges can change existing SMTP server settings on the...6.8 Medium
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function...9.8 Critical
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function...5.4 Medium
- hp inc. certain hp laserjet pro devices, hp cz172a firmware, cz173a firmware +12 more +14 moreCertain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack...7.6 High
- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function...8.2 High
silverstripe/frameworkPackagistSilverstripe XSS in Director::force_redirect()6.1 Medium- j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function...8.8 High
- campcodes complete web-based school management systemA SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School...8.6 High
- campcodes complete web-based school management systemA SQL injection vulnerability in /view/conversation_history_admin.php in Campcodes Complete Web...9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /view/emarks_range_grade_update_form.php in Campcodes Complete...9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/update_grade.php in Campcodes Complete Web-Based School...6.3 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/update_exam.php in Campcodes Complete Web-Based School...9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School...9.8 Critical
- mdempfle advanced iframeAdvanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/all_events1.php in Campcodes Complete Web-Based School...5.3 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /view/find_friends.php in Campcodes Complete Web-Based School...9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web...7.3 High
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/update_classroom.php in Campcodes Complete Web-Based...9.8 Critical
silverstripe/frameworkPackagistSilverstripe XSS In FormAction6.1 Mediumsilverstripe/frameworkPackagistSilverstripe XSS In rewritten hash links6.1 Mediumgithub.com/traefik/traefikGo,github.com/traefik/traefik/v2Go,github.com/traefik/traefik/v3Go +2 moreTraefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop5.3 Mediumsilverstripe/frameworkPackagistSilverstripe XSS In GridField print6.1 Mediumsilverstripe/frameworkPackagistSilverstripe XSS in TreeDropdownField and TreeMultiSelectField6.1 Mediumsilverstripe/frameworkPackagistSilverStripe framework XML Quadratic Blowup Attack5.3 Mediumsilverstripe/frameworkPackagistSilverstripe IE requests not properly behaving with rewritehashlinks6.1 Mediumsilverstripe/forumPackagistSilverstripe Forum Module CSRF Vulnerability5.3 Medium- hashthemes hash form – drag & drop form builder, hash form +1 moreHash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection8.1 High
- hashthemes hash form – drag & drop form builder, hash form, drag and drop form builder +2 moreHash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution9.8 Critical
- tauriiFrames Bypass Origin Checks for Tauri API Access Control5.9 Medium
- prodys quantum audio codecImproper access control vulnerability in Prodys Quantum Audio codec9.8 Critical
- openprojectStored Cross-Site Scripting (XSS) in OpenProject7.6 High
- xpro addons — 140+ widgets for elementor140+ Widgets | Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection8.0 High
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Insufficient Authorization Checks to Block Usual4.3 Medium
- dfir-iris iris-evtx-moduleArbitrary File Write in IRIS EVTX Pipeline8.8 High
- jupyter scheduler, jupyter-server jupyter-scheduler +1 morejupyter-scheduler's endpoint is missing authentication5.3 Medium
- citeum openctiOpenCTI Authenticated Privilege Escalation8.3 High
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Menu and Shape Divider6.4 Medium
- bdthemes prime slider – addons for elementor, prime slider +1 morePrime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget6.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block6.4 Medium
- layersliderLayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode6.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block6.4 Medium
- gitlabInefficient Regular Expression Complexity in GitLab4.3 Medium
- gitlabCross-Site Request Forgery (CSRF) in GitLab5.4 Medium
- gitlabImproper Handling of Highly Compressed Data (Data Amplification) in GitLab4.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab4.4 Medium
- eclipse dittoEclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input6.5 Medium
- unitecms unlimited elements for elementorUnlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]8.8 High
- Show moreLoading…