CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- openfind mail2000, mail2000 v8.0 +1 moreOpenfind Mail2000 - OS Command Injection8.8 High
- aviplugins.com wp bookingCross-site scripting vulnerability exists in WP Booking versions prior to 2.4.5. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing…4.7 Medium
- chris younger splunk config explorerCross-site scripting vulnerability exists in Splunk Config Explorer versions prior to 1.7.16. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who…6.1 Medium
- No product listedPointsharp Cryptshare Server before 7.0.0 has an XSS issue that is related to notification messages.6.1 Medium
- openfind mail2000, mail2000 v7.0, mail2000 v8.0 +2 moreOpenfind Mail2000 - OS Command Injection7.2 High
- campcodes online student enrollment systemitsourcecode Online Student Enrollment System instructorSubjects.php sql injection5.3 Medium
- campcodes online student enrollment systemitsourcecode Online Student Enrollment System newfaculty.php sql injection5.3 Medium
- campcodes online student enrollment system, online student enrollment system project student enrollment system +1 moreitsourcecode Online Student Enrollment System listofinstructor.php sql injection5.3 Medium
- campcodes online student enrollment systemitsourcecode Online Student Enrollment System newDept.php sql injection5.3 Medium
- campcodes online student enrollment system, online student enrollment system project student enrollment system +1 moreitsourcecode Online Student Enrollment System listofcourse.php sql injection5.3 Medium
- campcodes online student enrollment systemitsourcecode Online Student Enrollment System editSubject.php sql injection5.3 Medium
- campcodes online student enrollment systemitsourcecode Online Student Enrollment System listofsubject.php sql injection5.3 Medium
- campcodes online student enrollment systemitsourcecode Online Student Enrollment System listofstudent.php sql injection5.3 Medium
- oretnom23 online car wash booking systemoretnom23 Online Car Wash Booking System cross site scripting5.1 Medium
- targit decision suite 23.2.15007.0In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a cleartext HTTP session.7.5 High
- oretnom23 facebook news feed likeSourceCodester Facebook News Feed Like index.php sql injection6.9 Medium
- lakernote easyadminlakernote EasyAdmin upload cross site scripting5.3 Medium
- marvin test hw driverHw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 (for IoAllocateMdl, MmBuildMdlForNonPagedPool, and MmMapLo…5.4 Medium
- No product listedHw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory with read/write access via the MmMapIoSpace API (IOCTL 0x9c40a4f8, 0x9c40a4e8,…5.5 Medium
- marvin test hw driverHw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory (and consequently gain all privileges) via IOCTL 0x9c4064b8 (via MmMapIoSpace) a…7.4 High
- itsourcecode student information management systemitsourcecode Student Information Management System view.php sql injection5.3 Medium
- jsy-1 short-urljsy-1 short-url admin.php cross site scripting5.3 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Neutralization of Special Elements in mintplex-labs/anything-llm4.9 Medium
- heyewei jfinalcmsJFinalCMS template cross site scripting5.3 Medium
- nintendo wii uNintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a secondary verification mechanism that only checks whether a…7.4 High
- sourcecodester school intramurals student attendance management system, oretnom23 school intramurals - student attendance management system, sourcecodester school instramurals +2 moreSourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection5.3 Medium
- itsourcecode vehicle management system, sourcecodester vehicle service management system +1 moreSourceCodester Vehicle Management System newvehicle.php unrestricted upload6.9 Medium
- itsourcecode college management systemKashipara College Management System view_each_faculty.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_student.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_new_faculty.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_login.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_extracurricular_activity.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_enroll_student.php cross site scripting5.3 Medium
- college management system project management system, itsourcecode college management system +1 moreKashipara College Management System submit_enroll_staff.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System submit_admin.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System delete_faculty.php cross site scripting5.3 Medium
- itsourcecode college management systemKashipara College Management System each_extracurricula_activities.php cross site scripting5.3 Medium
- mayurik best house rental management system, sourcecodester house-rental-and-property-listing-php-full-source-code +1 moreSourceCodester Best House Rental Management System edit-cate.php sql injection5.3 Medium
- mattermost, mattermost server +1 moreSlash commands run in channel without channel membership via playbook task commands4.3 Medium
- mattermost, mattermost server +1 morePost actions can run playbook checklist task commands5.7 Medium
- mattermost, mattermost server +1 more/playbook add slash command allows viewing arbitrary post contents3.1 Low
- mattermost, mattermost server +1 moreMember promoted to channel admin via playbooks run linking to channel4.3 Medium
- mattermost, mattermost server +1 moreSAML to email switch possible when email signin is disabled4.3 Medium
- mattermost, mattermost server +1 moreRun Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"4.3 Medium
- mattermost, mattermost server +1 morePlaybook run link to private channel grants channel access5.9 Medium
- mattermost, mattermost server +1 morePlaybook Run Metadata leak to Guest4.3 Medium
- mattermost, mattermost server +1 moreAD/LDAP Group Members Leak4.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System manage_payment.php sql injection5.3 Medium
- mayurik best house rental management system, sourcecodester house-rental-and-property-listing-php-full-source-code +1 moreSourceCodester Best House Rental Management System manage_tenant.php sql injection5.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System manage_user.php sql injection5.3 Medium
- Show moreLoading…