CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
- microchip mplab harmony, mplab® harmony 3 core module +1 moreMicrochip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command7.0 High
- ptrd kwikThe TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connectio…9.1 Critical
gnome-shellAlmaLinux,gnome-classic-sessionAlmaLinux,gnome-shell-debuginfoRed Hat +25 more +27 moreModerate: gnome-shell security update6.5 Medium- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parame…5.4 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.6.3 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.5.4 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index paramete…6.5 Medium
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter.9.8 Critical
- campcodes complete web-based school management systemA SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter.9.8 Critical
getformwork/formworkPackagistformwork Cross-site scripting vulnerability in Markdown fields4.8 Medium- automationdirect p3-550e, p3-550e firmware, p1-540 firmware +4 more +6 moreA heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to deni…8.2 High
- automationdirect p3-550e, p3-550e firmware, p1-540 firmware +4 more +6 moreA heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to deni…8.2 High
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buf…7.5 High
- automationdirect p3-550e, p3-550e firmware +1 moreSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead t…8.2 High
- automationdirect p3-550e, p3-550e firmware +1 moreSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead t…8.2 High
- automationdirect p3-550e, p3-550e firmware +1 moreSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead t…8.2 High
- automationdirect p3-550e, p3-550e firmware +1 moreSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead t…8.2 High
- automationdirect p3-550e, p3-550e firmware +1 moreSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead t…8.2 High
- automationdirect p3-550e, p3-550e firmware +1 moreSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead t…8.2 High
- automationdirect p3-550e, p3-550e firmware, p1-540 firmware +4 more +6 moreA stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to…9.8 Critical
- automationdirect p3-550e, p3-550e firmware, p1-540 firmware +4 more +6 moreA stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to…9.8 Critical
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a…7.5 High
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead…9.1 Critical
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorize…9.8 Critical
- automationdirect p3-550e, p1-540 firmware, p1-550 firmware +4 more +6 moreA code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can lead to arbitrary code execution. An attacker can pro…9.8 Critical
- douchatDouchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.9.8 Critical
- cisolutions ci out of office managerci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.6.5 Medium
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules5.3 Medium
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth8.8 High
- microfocus imanagerCross Site Request Forgery vulnerability in iManager5.4 Medium
- microfocus imanagerXML External Entity injection vulnerability in iManager7.8 High
- totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.9.8 Critical
- totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to e…8.8 High
- teamviewer remote, remote (full client), remote (host) +2 moreImproper fingerprint validation in the TeamViewer Client6.4 Medium
kernel-rtSUSE,kernel-rt_debugSUSE,kernel-source-rtSUSE +1 more +3 moreSecurity update for the Linux KernelNo scorekernel-azureopenSUSE,kernel-source-azureopenSUSE,kernel-syms-azureopenSUSE +2 moreSecurity update for the Linux KernelNo score- libiglMultiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary cod…7.8 High
- libiglMultiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary cod…7.8 High
- libiglMultiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary cod…7.8 High
- libiglMultiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary cod…7.8 High
- libiglMultiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary cod…7.8 High
- libiglAn out-of-bounds write vulnerability exists in the PlyFile ply_cast_ascii functionality of libigl v2.5.0. A specially crafted .ply file can lead to a heap buffer overflow. An attacker can provide a ma…8.1 High
- libiglMultiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide…8.8 High
- libiglMultiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide…8.8 High
- libiglMultiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide…8.8 High
- libiglMultiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide…8.8 High
- Show moreLoading…