CVEs published April 13, 2024
16 CVEs were published on April 13, 2024: 0 critical, 2 high.
- Published
- 16
- Critical
- 0
- High
- 2
- Medium
- 13
- Low
- 0
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- cym1102 nginxWebUI
- 5
- Campcodes House Rental Management System
- 1
- Linux
- 1
- nextendweb Smart Slider
- 1
- Smart Office
- 1
- stellarwp GiveWP – Donation Plugin and Fundraising Platform
- 1
- TBK DVR-4104 · TBK DVR-4216
- 1
- Tianwell Fire Intelligent Command Platform
- 1
- WP Shortcodes Plugin — Shortcodes Ultimate
- 1
- wpclever WPC Smart Quick View for WooCommerce
- 1
High 2
Medium, low and unrated 14
- CVE-2024-3740cym1102 nginxWebUI reload exec deserializationcym1102 nginxWebUI
- CVE-2024-3739cym1102 nginxWebUI upload os command injectioncym1102 nginxWebUI
- CVE-2024-3737cym1102 nginxWebUI addOver findCountByQuery path traversalcym1102 nginxWebUI
- CVE-2024-3736cym1102 nginxWebUI upload unrestricted uploadcym1102 nginxWebUI
- CVE-2024-3735Smart Office Main.aspx weak passwordSmart Office
- CVE-2024-3721TBK DVR-4104/DVR-4216 os command injectionTBK DVR-4104 · TBK DVR-4216
- CVE-2024-3720Tianwell Fire Intelligent Command Platform API Interface page sql injectionTianwell Fire Intelligent Command Platform
- CVE-2024-26817amdkfd: use calloc instead of kzalloc to avoid integer overflowLinux
- CVE-2024-3719Campcodes House Rental Management System ajax.php sql injectionCampcodes House Rental Management System
- CVE-2024-3662WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image DeletionWPZOOM Social Feed Widget & Block
- CVE-2023-6494WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scriptingwpclever WPC Smart Quick View for WooCommerce
- CVE-2024-2583Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSSWP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2024-3027Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Uploadnextendweb Smart Slider
- CVE-2024-1957GiveWP – Donation Plugin and Fundraising Platform <= 3.6.1 -- Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodestellarwp GiveWP – Donation Plugin and Fundraising Platform