CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- code-projects online hospital management systemSourceCodester Online Hospital Management System departmentDoctor.php sql injection6.9 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System normal-bwdates-reports-details.php sql injection5.3 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System foreigner-bwdates-reports-details.php sql injection5.3 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System foreigner-search.php sql injection5.3 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System normal-search.php sql injection5.3 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System forgot-password.php sql injection6.9 Medium
- anji-plus aj-reportanji-plus AJ-Report testTransform;swagger-ui sql injection5.3 Medium
- anji-plus aj-report, report +1 moreanji-plus AJ-Report IGroovyHandler command injection5.3 Medium
- anji-plus aj-report, report +1 moreanji-plus AJ-Report detailByCode information disclosure5.3 Medium
- anji-plus aj-reportanji-plus AJ-Report ZIP File decompress path traversal5.3 Medium
- anji-plus aj-reportanji-plus AJ-Report validationRules deserialization5.3 Medium
- anji-plus aj-reportanji-plus AJ-Report Javascript getValueFromJs deserialization5.3 Medium
roundcubemailMageiaUpdated roundcubemail packages fix security vulnerabilitiesNo score- anji-plus aj-reportanji-plus AJ-Report pageList sql injection5.3 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC sub_commit.php os command injection5.1 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability7.1 High
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC online_check.php os command injection5.1 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC online.php os command injection5.1 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC user_commit.php os command injection5.1 Medium
- ruijie rg-uac, rg-uac 6000-cc firmware, rg-uac 6000-e10 firmware +25 more +27 moreRuijie RG-UAC vlan_add_commit.php addVlan os command injection5.1 Medium
- optinmonster, smub popup builder & popup maker for wordpress – optinmonster email marketing and lead generation +1 morePopup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- designextreme reviews and rating – google reviews, reviews and rating-google review +1 moreReviews and Rating – Google Reviews <= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- uapp testimonial carousel for elementorTestimonial Carousel For Elementor <= 10.2.0 - Missing Authorization to Limited Setting Update5.3 Medium
- nicheaddons primary addon for elementor, livemeshelementor addons for elementor +1 morePrimary Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget6.4 Medium
- nicdark nd shortcodesND Shortcodes <= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
libultrahdrOSS-FuzzHeap-buffer-overflow in ultrahdr::getYuv420PixelNo scorefossilDebianfossil - security updateNo score- vaultize drmAn issue was discovered in Vaultize 21.07.27. When uploading files, there is no check that the filename parameter is correct. As a result, a temporary file will be created outside the specified direct…6.5 Medium
- mocodo onlineMocodo vulnerable to SQL injection in `/web/generate.php`9.8 Critical
- mocodo online, mocado +1 moreMocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.9.8 Critical
- facebookgithub.com/huandu/facebook may expose access_token in error message3.7 Low
- No product listedAn issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects produc…7.2 High
- totolink nr1800x, nr1800x firmware +1 moreTOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode8.8 High
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.9.8 Critical
- aptos wisalAptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connec…6.5 Medium
- soot-oss sootSoot Infinite Loop vulnerability4.3 Medium
- svnwebuisvnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserController#importOver. This vulnerability allows attackers to…4.3 Medium
- totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.8.8 High
- totolink cp900, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root.9.8 Critical
- debian linux, linux kernel +1 moretty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc7.8 High
- linux, linux kernel +1 morenet: nexthop: fix null pointer dereference when IPv6 is not enabled5.5 Medium
- linux, linux kernel +1 morestaging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()7.8 High
- linux, linux kernel +1 morestaging: r8188eu: fix a memory leak in rtw_wx_read32()5.5 Medium
- linux, linux kernel +1 moreio_uring: fail cancellation for EXITING tasks5.5 Medium
- linux, linux kernel +1 moreksmbd: fix memleak in get_file_stream_info()5.5 Medium
- linux, linux kernel +1 morepowerpc/32: Fix hardlockup on vmap stack overflow5.5 Medium
- linux, linux kernel +1 moreproc/vmcore: fix clearing user buffer by properly using clear_user()7.8 High
- linux, linux kernel +1 morescsi: mpt3sas: Fix kernel panic during drive powercycle test7.8 High
- linux, linux kernel +1 morenet: marvell: prestera: fix double free issue on err path7.8 High
- linux, linux kernel +1 moreice: avoid bpf_prog refcount underflow5.5 Medium
- Show moreLoading…