CVEs published in May 2024
5,284 vulnerabilities, 411 critical, 14 exploited.
typo3/cms-corePackagistTYPO3 Possible Insecure Deserialization in Extbase Request Handling8.1 Hightypo3/cms-corePackagistTYPO3 Cross-Site Scripting in Filelist Module6.1 Mediumtypo3/cms-corePackagistTYPO3 Cross-Site Scripting in Link Handling6.1 Mediumtypo3/cms-corePackagistTYPO3 Cross-Site Scripting in Form Framework validation handling6.1 Mediumtypo3/cms-corePackagistTYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API8.8 Hightypo3/cms-corePackagistTYPO3 Broken Access Control in Import Module4.3 Mediumtypo3/cms-corePackagistTYPO3 Security Misconfiguration in Frontend Session Handling8.2 Hightypo3/cms-corePackagistTYPO3 Information Disclosure in Backend User Interface5.4 Mediumtypo3/cms-corePackagistTYPO3 Information Disclosure in User Authentication5.3 Mediumtypo3/cms-corePackagistTYPO3 Disclosure of Information about Installed Extensions5.3 Medium- carrier lenels2 netbox, lenels2 netbox +1 moreLenelS2 NetBox Improper Neutralization of Argumented Delimiters9.3 Critical
- carrier lenels2 netbox, lenels2 netbox +1 moreLenelS2 NetBox Improper Neutralization of Special Elements9.3 Critical
- carrier lenels2 netbox, lenels2 netbox +1 moreLenelS2 NetBox Hardcoded Credentials8.8 High
- oretnom23 human resource management systemA SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.9.8 Critical
- oretnom23 human resource management systemA SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allows attackers to execute arbitrary SQL commands via the password parameter.5.4 Medium
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.8.1 High
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.7.1 High
- metersphereUnauthorized viewing of workspace test cases in MeterSphere3.5 Low
typo3/cms-corePackagistTYPO3 Information Disclosure in Page Tree4.3 Medium- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.6.5 Medium
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the arg…9.8 Critical
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argum…9.8 Critical
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulati…5.4 Medium
typo3/cms-corePackagistTYPO3 Security Misconfiguration in User Session Handling6.5 Medium- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argum…9.8 Critical
typo3/cms-corePackagistTYPO3 Cross-Site Scripting in Form Framework6.1 Mediumtypo3/cms-corePackagistTYPO3 Cross-Site Scripting in Language Pack Handling6.1 Mediumtypo3/cms-corePackagistTYPO3 Arbitrary Code Execution via File List Module8.8 High- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions…7.5 High
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter mid…6.1 Medium
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id…9.8 Critical
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.6.1 Medium
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the a…9.8 Critical
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the…9.8 Critical
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argum…6.3 Medium
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the arg…5.3 Medium
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results i…5.4 Medium
- itsourcecode learning management system project in php, learning management system +1 moreItsourceCode Learning Management System Project In PHP login.php sql injection6.9 Medium
- dino physics school assistant project physics school assistantA vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the a…6.5 Medium
- zkteco zkbio cvsecurityIn ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.8.1 High
typo3/cms-corePackagistTYPO3 Broken Access Control in Localization Handling6.5 Mediumtypo3/cms-fluidPackagistTYPO3 Cross-Site Scripting in Fluid ViewHelpers6.1 Mediumtypo3/cms-corePackagistTYPO3 Security Misconfiguration for Backend User Accounts7.5 Hightypo3/cms-corePackagistTYPO3 Denial of Service in Frontend Record Registration7.5 High- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morepinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()5.5 Medium
- linux, linux kernel, netapp converged systems advisor agent +8 more +10 moreNFSD: Fix nfsd4_encode_fattr4() crasher9.8 Critical
- debian linux, linux kernel +1 moreocteontx2-af: avoid off-by-one read from userspace5.5 Medium
- linux, linux kernel +1 morethermal/debugfs: Free all thermal zone debug memory on zone removal5.5 Medium
- linux, linux kernel +1 moreALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()7.7 High
- debian linux, linux kernel +1 moretipc: fix a possible memleak in tipc_buf_append5.5 Medium
- Show moreLoading…