CVEs published April 3, 2024
231 CVEs were published on April 3, 2024: 20 critical, 69 high.
- Published
- 231
- Critical
- 20
- High
- 69
- Medium
- 75
- Low
- 11
- Unrated
- 56
- Now in CISA KEV
- 0
- Fix available
- 33
Most affected products
- Linux
- 94
- Foxit PDF Reader
- 14
- Kofax Power PDF
- 12
- SourceCodester Internship Portal Management System
- 8
- IBM Db2 for Linux, UNIX and Windows
- 6
- Concrete CMS · concrete5/concrete5
- 5
- SourceCodester PHP Task Management System
- 5
- Open Automation Software OAS Platform
- 4
- AYS Pro Plugins Survey Maker
- 2
- Cisco Emergency Responder
- 2
Critical 20
- CVE-2024-26760scsi: target: pscsi: Fix bio_put() for error caseLinux
- CVE-2023-25699WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)VideoWhisper.com VideoWhisper Live Streaming Integration
- CVE-2024-24707WordPress Cwicly plugin <= 1.4.0.2 - Auth. Remote Code Execution (RCE) vulnerabilityCwicly Builder, SL. Cwicly
- CVE-2024-25096WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerabilityCanto
- CVE-2024-25918WordPress InstaWP Connect plugin <= 0.1.0.8 - Remote Code Execution vulnerabilityInstaWP Connect
- CVE-2024-27951WordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerabilityThemeisle Multiple Page Generator Plugin – MPG
- CVE-2024-27972WordPress WP Fusion Lite plugin <= 3.41.24 - Remote Code Execution (RCE) vulnerabilityJack Arturo WP Fusion Lite
- CVE-2024-31380WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerabilitySoflyy Oxygen Builder
- CVE-2024-31390WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerabilitySoflyy Breakdance
- CVE-2024-2879The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to LayerSlider
- CVE-2021-27312Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive gleez/cms
- CVE-2023-44039In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifications and is allow
- CVE-2024-24724Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution
- CVE-2024-25864Server Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code a
- CVE-2024-28515Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of cs
- CVE-2024-30166In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack
- CVE-2024-30568Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.
- CVE-2024-30998SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain se
- CVE-2024-31011Arbitrary file write vulnerability in beescms v.4.0, allows a remote attacker to execute arbitrary code via a file path that was not isolate
- CVE-2024-31012An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive inform
High 69
- CVE-2024-30265Voilà Local file inclusionvoila-dashboards voila · voila
- CVE-2024-28870Suricata uses excessive resource use in malformed ssh traffic parsingOISF suricata
- CVE-2024-0335Malformed Packet HandlingABB Symphony Plus S+ Operations · ABB Symphony Plus S+ E… +1
- CVE-2024-2653CVE-2024-2653amphp/http-client · amphp/http
- CVE-2024-26779wifi: mac80211: fix race condition on enabling fast-xmitLinux
- CVE-2024-26773ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()Linux
- CVE-2024-26772ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()Linux
- CVE-2024-26769nvmet-fc: avoid deadlock on delete association pathLinux
- CVE-2024-26768LoongArch: Change acpi_core_pic[NR_CPUS] to acpi_core_pic[MAX_CORE_PIC]Linux
- CVE-2024-26766IB/hfi1: Fix sdma.h tx->num_descs off-by-one errorLinux
- CVE-2024-26763dm-crypt: don't modify the data when using authenticated encryptionLinux
- CVE-2024-26762cxl/pci: Skip to handle RAS errors if CXL.mem device is detachedLinux
- CVE-2024-26759mm/swap: fix race when skipping swapcacheLinux
- CVE-2024-26748usb: cdns3: fix memory double free when handle zero packetLinux
- CVE-2024-26739net/sched: act_mirred: don't override retval if we already lost the skbLinux
- CVE-2024-26737bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancelLinux
- CVE-2024-26736afs: Increase buffer size in afs_update_volume_status()Linux
- CVE-2024-26734devlink: fix possible use-after-free and memory leaks in devlink_init()Linux
- CVE-2024-26730hwmon: (nct6775) Fix access to temperature configuration registersLinux
- CVE-2024-26728drm/amd/display: fix null-pointer dereference on edid readingLinux
- CVE-2023-52640fs/ntfs3: Fix oob in ntfs_listxattrLinux
- CVE-2024-20348A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthCisco Data Center Network Manager
- CVE-2024-30366Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30334Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30333Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30332Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30331Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30330Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30328Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30327Foxit PDF Reader template Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30326Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30325Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30324Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30323Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-30322Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution VulnerabilityFoxit PDF Reader
- CVE-2024-20281A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauCisco Data Center Network Manager · Cisco Nexus Dashboard
- CVE-2024-27344Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27342Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27341Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27340Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27339Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27338Kofax Power PDF app response Out-Of-Bounds Read Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27337Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-27335Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityKofax Power PDF
- CVE-2024-31392If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status ThiMozilla Firefox for iOS
- CVE-2024-26723lan966x: Fix crash when adding interface under a lagLinux
- CVE-2024-26718dm-crypt, dm-verity: disable taskletsLinux
- CVE-2024-26712powerpc/kasan: Fix addr error caused by page alignmentLinux
- CVE-2024-26706parisc: Fix random data corruption from exception handlerLinux
- CVE-2024-26704ext4: fix double-free of blocks due to wrong extents moved_lenLinux
- CVE-2024-26699drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgrLinux
- CVE-2024-26697nilfs2: fix data corruption in dsync block recovery for small block sizesLinux
- CVE-2024-26692smb: Fix regression in writes when non-standard maximum write size negotiatedLinux
- CVE-2024-26690net: stmmac: protect updates of 64-bit statistics countersLinux
- CVE-2024-26689ceph: prevent use-after-free in encode_cap_msg()Linux
- CVE-2023-52637can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)Linux
- CVE-2024-0394Rapid7 Minerva Armor Privilege EscalationRapid7 Minerva
- CVE-2024-27191WordPress Slivery Extender plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerabilityinpersttion Slivery Extender
- CVE-2024-0172Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability.Dell PowerEdge Platform
- CVE-2024-29734Uncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which may lead to insecurely loading Dynamic LinFujidenolo Solutions Co. SonicDICOM Media Viewer
- CVE-2024-3226Campcodes Online Patient Record Management System login.php sql injectionCampcodes Online Patient Record Management System
- CVE-2023-52043An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wireless Access Point Pas
- CVE-2024-27674Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an un
- CVE-2024-27705Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files
- CVE-2024-29477Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjacent access to the netdolibarr/dolibarr
- CVE-2024-30569An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentica
- CVE-2024-30571An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any au
- CVE-2024-30572Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.
- CVE-2024-31010SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php.
Medium, low and unrated 142
- CVE-2024-3270ThingsBoard AdvancedFeature access controlThingsBoard
- CVE-2024-2689Denial of Service if invalid UTF-8 sentTemporal Technologies Temporal Server · go.temporal.io/s… +1
- CVE-2024-3181Concrete CMS version 9 prior to 9.2.8 and previous versions prior to 8.5.16 are vulnerable to Stored XSS in the Search Field.Concrete CMS · concrete5/concrete5
- CVE-2024-3180Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type fileConcrete CMS · concrete5/concrete5
- CVE-2024-3179Concrete CMS version 9 before 9.2.8 and previous versions before 8.5.16 are vulnerable to Stored XSS in the Custom Class pageConcrete CMS · concrete5/concrete5
- CVE-2024-3178Concrete CMS versions 9 below 9.2.8 and versions below 8.5.16 are vulnerable to Cross-site Scripting (XSS) in the Advanced File Search FilterConcrete CMS · concrete5/concrete5
- CVE-2024-2753Concrete CMS version 9 below 9.2.8 and below 8.5.16 is vulnerable to stored XSS on the calendar color settings screenConcrete CMS · concrete5/concrete5
- CVE-2024-2758CVE-2024-2758Tempesta FW
- CVE-2024-26778fbdev: savage: Error out if pixclock equals zeroLinux
- CVE-2024-26777fbdev: sis: Error out if pixclock equals zeroLinux
- CVE-2024-26776spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detectedLinux
- CVE-2024-26775aoe: avoid potential deadlock at set_capacityLinux
- CVE-2024-26774ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corruptLinux
- CVE-2024-26771dmaengine: ti: edma: Add some null pointer checks to the edma_probeLinux
- CVE-2024-26770HID: nvidia-shield: Add missing null pointer checks to LED initializationLinux
- CVE-2024-26767drm/amd/display: fixed integer types and null check locationsLinux
- CVE-2024-26765LoongArch: Disable IRQ before init_fn() for nonboot CPUsLinux
- CVE-2024-26764fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaioLinux
- CVE-2024-26761cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS windowLinux
- CVE-2024-26758md: Don't ignore suspended array in md_check_recovery()Linux
- CVE-2024-26757md: Don't ignore read-only array in md_check_recovery()Linux
- CVE-2024-26756md: Don't register sync_thread for reshape directlyLinux
- CVE-2024-26755md: Don't suspend the array for interrupted reshapeLinux
- CVE-2024-26754gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()Linux
- CVE-2024-26753crypto: virtio/akcipher - Fix stack overflow on memcpyLinux
- CVE-2024-26752l2tp: pass correct message length to ip6_append_dataLinux
- CVE-2024-26751ARM: ep93xx: Add terminator to gpiod_lookup_tableLinux
- CVE-2024-26749usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()Linux
- CVE-2024-26747usb: roles: fix NULL pointer issue when put module's referenceLinux
- CVE-2024-26744RDMA/srpt: Support specifying the srpt_service_guid parameterLinux
- CVE-2024-26743RDMA/qedr: Fix qedr_create_user_qp error flowLinux
- CVE-2024-26742scsi: smartpqi: Fix disable_managed_interruptsLinux
- CVE-2024-26741dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().Linux
- CVE-2024-26740net/sched: act_mirred: use the backlog for mirred ingressLinux
- CVE-2024-26738powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controllerLinux
- CVE-2024-26735ipv6: sr: fix possible use-after-free and null-ptr-derefLinux
- CVE-2024-26733arp: Prevent overflow in arp_req_get().Linux
- CVE-2024-26732net: implement lockless setsockopt(SO_PEEK_OFF)Linux
- CVE-2024-26731bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()Linux
- CVE-2024-26729drm/amd/display: Fix potential null pointer dereference in dc_dmub_srvLinux
- CVE-2023-52641fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()Linux
- CVE-2024-23540HCL BigFix Inventory is vulnerable to path traversalHCL Software BigFix Inventory
- CVE-2024-1180TP-Link Omada ER605 Access Control Command Injection Remote Code Execution VulnerabilityTP-Link Omada ER605
- CVE-2024-20352A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which coCisco Emergency Responder
- CVE-2024-20347A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow theCisco Emergency Responder
- CVE-2024-20362A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could alCisco Small Business RV Series Router Firmware
- CVE-2024-20283A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment information on an affecteCisco Nexus Dashboard
- CVE-2024-20334A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-privileged, remote attaCisco TelePresence Management Suite
- CVE-2024-20368A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attackeCisco Identity Services Engine Software
- CVE-2024-30329Foxit PDF Reader Annotation Use-After-Free Information Disclosure VulnerabilityFoxit PDF Reader
- CVE-2024-20367A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-siteCisco Enterprise Chat and Email
- CVE-2024-20332A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker Cisco Identity Services Engine Software
- CVE-2024-20302A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacCisco Nexus Dashboard Orchestrator
- CVE-2024-20282A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privilegCisco Nexus Dashboard
- CVE-2024-27346Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityKofax Power PDF
- CVE-2024-27345Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityKofax Power PDF
- CVE-2024-20310A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unCisco IOS XE Software · Cisco Unified Communications Manage…
- CVE-2024-27343Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityKofax Power PDF
- CVE-2024-27336Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityKofax Power PDF
- CVE-2024-31393Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerabilitMozilla Firefox for iOS
- CVE-2024-26727btrfs: do not ASSERT() if the newly created subvolume already got readLinux
- CVE-2024-26726btrfs: don't drop extent_map for free space inode on write errorLinux
- CVE-2024-26725dpll: fix possible deadlock during netlink dump operationLinux
- CVE-2024-26724net/mlx5: DPLL, Fix possible use after free after delayed work timer triggersLinux
- CVE-2024-26722ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()Linux
- CVE-2024-26721drm/i915/dsc: Fix the macro that calculates DSCC_/DSCA_ PPS reg addressLinux
- CVE-2024-26719nouveau: offload fence uevents work to workqueueLinux
- CVE-2024-26717HID: i2c-hid-of: fix NULL-deref on failed power upLinux
- CVE-2024-26716usb: core: Prevent null pointer dereference in update_port_device_stateLinux
- CVE-2024-26715usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspendLinux
- CVE-2024-26714interconnect: qcom: sc8180x: Mark CO0 BCM keepaliveLinux
- CVE-2024-26711iio: adc: ad4130: zero-initialize clock init dataLinux
- CVE-2024-26710powerpc/kasan: Limit KASAN thread size increase to 32KBLinux
- CVE-2024-26709powerpc/iommu: Fix the missing iommu_group_put() during platform domain attachLinux
- CVE-2024-26708mptcp: really cope with fastopen raceLinux
- CVE-2024-26707net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()Linux
- CVE-2024-26705parisc: BTLB: Fix crash when setting up BTLB at CPU bringupLinux
- CVE-2024-26703tracing/timerlat: Move hrtimer_init to timerlat_fd open()Linux
- CVE-2024-26702iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRCLinux
- CVE-2024-26700drm/amd/display: Fix MST Null Ptr for RVLinux
- CVE-2024-26698hv_netvsc: Fix race condition between netvsc_probe and netvsc_removeLinux
- CVE-2024-26696nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()Linux
- CVE-2024-26695crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_lockedLinux
- CVE-2024-26694wifi: iwlwifi: fix double-free bugLinux
- CVE-2024-26693wifi: iwlwifi: mvm: fix a crash when we run out of stationsLinux
- CVE-2024-26691KVM: arm64: Fix circular locking dependencyLinux
- CVE-2024-26688fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_superLinux
- CVE-2024-26687xen/events: close evtchn after mapping cleanupLinux
- CVE-2024-26686fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children statsLinux
- CVE-2024-26685nilfs2: fix potential bug in end_buffer_async_writeLinux
- CVE-2023-52639KVM: s390: vsie: fix race during shadow creationLinux
- CVE-2023-52638can: j1939: prevent deadlock by changing j1939_socks_lock to rwlockLinux
- CVE-2024-31420Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashescnv · Red Hat OpenShift Virtualization +1
- CVE-2024-31419Cnv: information disclosure through the usage of vm-dump-metricscnv · Red Hat OpenShift Virtualization
- CVE-2024-24976A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS PlatOpen Automation Software OAS Platform
- CVE-2024-27201An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS PlatforOpen Automation Software OAS Platform
- CVE-2024-21870A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057.Open Automation Software OAS Platform
- CVE-2024-22178A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.0Open Automation Software OAS Platform
- CVE-2024-3259SourceCodester Internship Portal Management System delete_activity.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-3258SourceCodester Internship Portal Management System add_activity.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-3257SourceCodester Internship Portal Management System edit_activity_query.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-22360IBM Db2 for Linux, UNIX and Windows denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-3256SourceCodester Internship Portal Management System edit_activity.php sql injectionSourceCodester Internship Portal Management System
- CVE-2023-52296IBM Db2 for Linux, UNIX and Windows denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-38729IBM Db2 information disclosureIBM Db2 for Linux, UNIX and Windows
- CVE-2024-27254IBM Db2 for Linux, UNIX and Windows denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-25046IBM Db2 for Linux, UNIX and Windows denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-25030IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be rIBM Db2 for Linux, UNIX and Windows
- CVE-2024-28782IBM QRadar Suite Software information disclosureIBM QRadar Suite Software · IBM Cloud Pak for Security
- CVE-2024-3255SourceCodester Internship Portal Management System edit_admin_query.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-3254SourceCodester Internship Portal Management System edit_admin.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-3253SourceCodester Internship Portal Management System add_admin.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-3252SourceCodester Internship Portal Management System check_admin.php sql injectionSourceCodester Internship Portal Management System
- CVE-2024-3251SourceCodester Computer Laboratory Management System sql injectionSourceCodester Computer Laboratory Management System
- CVE-2023-35764Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP AYS Pro Plugins Survey Maker
- CVE-2023-34423Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability.AYS Pro Plugins Survey Maker
- CVE-2024-2322WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRFWooCommerce Cart Abandonment Recovery
- CVE-2024-3162Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonialjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2024-1327Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Boxjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2024-3227Panwei eoffice OA Backend save_image.php path traversalPanwei eoffice OA
- CVE-2024-3225SourceCodester PHP Task Management System edit-task.php sql injectionSourceCodester PHP Task Management System
- CVE-2024-3224SourceCodester PHP Task Management System task-details.php sql injectionSourceCodester PHP Task Management System
- CVE-2024-3223SourceCodester PHP Task Management System admin-manage-user.php sql injectionSourceCodester PHP Task Management System
- CVE-2024-3222SourceCodester PHP Task Management System admin-password-change.php sql injectionSourceCodester PHP Task Management System
- CVE-2024-3221SourceCodester PHP Task Management System attendance-info.php sql injectionSourceCodester PHP Task Management System
- CVE-2023-35812An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111
- CVE-2023-44038In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via
- CVE-2023-44040In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerability that can be exploited by
- CVE-2023-45552In VeridiumID before 3.5.0, a stored cross-site scripting (XSS) vulnerability has been discovered in the admin portal that allows an authent
- CVE-2024-24506Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitr
- CVE-2024-26495Cross Site Scripting (XSS) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtai
- CVE-2024-27706Cross Site Scripting vulnerability in Huly Platform v.0.6.202 allows attackers to execute arbitrary code via upload of crafted SVG file to i
- CVE-2024-28219In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.pillow
- CVE-2024-28275Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive information in cleartext.
- CVE-2024-28589An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbi
- CVE-2024-28755An issue was discovered in Mbed TLS 3.5.x before 3.6.0.
- CVE-2024-28836An issue was discovered in Mbed TLS 3.5.x before 3.6.0.
- CVE-2024-29413Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the
- CVE-2024-30570An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication
- CVE-2024-31008An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the ind
- CVE-2024-31009SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php.
- CVE-2024-31013Cross Site Scripting (XSS) vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to