CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
typo3/cms-corePackagistTYPO3 CMS Privilege Escalation and SQL Injection7.5 Hightypo3/cms-corePackagistTYPO3 CMS Insecure Deserialization & Arbitrary Code Execution9.8 Criticaltypo3/cms-corePackagistTYPO3 CMS Authentication Bypass vulnerability7.5 Hightwig/twigPackagistTwig Path Traversal vulnerability in the filesystem loader5.3 Mediumtiton/frameworkPackagisttiton/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack9.8 Critical- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System massage.php sql injection5.3 Medium
thelia/theliaPackagistThelia authentication bypass vulnerability7.5 Highthelia/backoffice-default-templatePackagistThelia BackOffice default template vulnerable to Cross-site Scripting6.1 Mediumthelia/theliaPackagistThelia Cross-site Scripting vulnerability in BackOffice6.1 Mediumsymfony/validatorPackagistsymfony/validator XML Entity Expansion vulnerability7.5 Highsymfony/translationPackagistsymfony/translation XML Entity Expansion vulnerability7.5 High- sourcecodester stock management systemSourceCodester Stock Management System createBrand.php sql injection5.3 Medium
symfony/symfonyPackagist,symfony/web-profiler-bundlePackagist +1 moreSymfony Cross-Site Request Forgery vulnerability in the Web Profiler8.1 High- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morertnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation5.5 Medium
symfony/symfonyPackagistSymfony2 improper IP based access control5.9 Medium- qdrant, qdrant qdrant/qdrant +1 morePath Traversal in qdrant/qdrant9.8 Critical
fwupdateopenSUSESecurity update for fwupdateNo scoresymfony/symfonyPackagistSymfony XML Entity Expansion security vulnerability7.5 Highsymfony/symfonyPackagistSymfony XML decoding attack vector through external entities9.8 Critical- vadi digikent gisSQLi in Vadi Corporate Information Systems' DIGIKENT GIS10.0 Critical
- ibm aspera consoleIBM Aspera Console information disclosure4.0 Medium
- ibm aspera consoleIBM Aspera Console cross-site scripting5.4 Medium
- ibm aspera consoleIBM Aspera Console cross-site scripting4.6 Medium
- alkacon opencmsCross-Site Scripting stored in Alkacon OpenCMS6.4 Medium
- alkacon opencmsCross-Site Scripting stored in Alkacon OpenCMS6.4 Medium
- wpxpo post grid gutenberg blocks for news, magazines, blog websites – postxPost Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update8.8 High
- topdevs simple like page plugin – fast & privacy-friendly page embedsSimple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- celomitan gum addon for elementorGum Elementor Addon <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price Table and Post Slider Widgets6.4 Medium
- sminozzi block bad bots and stop bad bots crawlers and spiders and anti spam protectionBlock Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure4.3 Medium
- comparisonslider comparison sliderComparison Slider <= 1.0.5 - Missing Authorization4.3 Medium
- comparisonslider comparison sliderComparison Slider <= 1.0.5 - Cross-Site Request Forgery4.3 Medium
- khl32 font farsiFont Farsi <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- doublesharp remote content shortcodeRemote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4 Medium
- comparisonslider comparison sliderComparison Slider <= 1.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- ideabox powerpack addons for elementor, ideaboxcreations powerpack addons for elementor (free widgets, extensions and templates) +1 morePowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 2.7.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed6.4 Medium
- kontron redmine dmsf pluginPath traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server (within the…8.1 High
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro +1 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget6.4 Medium
- wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 morePOST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection7.2 High
- delower wp to doWP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings4.4 Medium
- yumpu epaper publishing, e-paper publishing +1 moreYumpu ePaper publishing <= 2.0.24 - Missing Authorization to PDF Upload, Publishing, and API Key Modification5.0 Medium
- fernandobt list categoriesList categories <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- delower wp to doWP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings4.3 Medium
- delower wp to doWP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()4.3 Medium
- delower wp to doWP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment4.3 Medium
- perrinalexandre05 affieasyAffiEasy <= 1.1.6 - Cross-Site Request Forgery to Various Actions6.5 Medium
- wp chill download monitorDownload Monitor <= 4.9.13 - Missing Authorization5.4 Medium
- uapp testimonial carousel for elementorTestimonial Carousel For Elementor <= 10.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- unitecms unlimited elements for elementorUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field5.4 Medium
- wpbean wpb elementor addons, wpb addons for elementor – news ticker, timeline, team & more widgets +1 moreWPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- Show moreLoading…