# CVEs published 2024-04-21

5 CVEs were published on April 21, 2024: 0 critical, 0 high. Days are UTC.

- [CVE-2015-10132](https://cve.now/CVE-2015-10132.md): Thimo Grauerholz WP-Spreadplugin spreadplugin.php cross site scripting (CVSS 3.5, Thimo Grauerholz WP-Spreadplugin)
- [CVE-2024-29733](https://cve.now/CVE-2024-29733.md): Apache Airflow FTP Provider: FTP\_TLS instance with unverified SSL context (CVSS 2.7, Apache Software Foundation Apache Airflow FTP Provider · ap…)
- [CVE-2024-29217](https://cve.now/CVE-2024-29217.md): Apache Answer: XSS vulnerability when changing personal website (CVSS 4.6, Apache Software Foundation Apache Answer · github.com/apach…)
- [CVE-2024-4022](https://cve.now/CVE-2024-4022.md): Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 Version Data version.js information disclosure (CVSS 5.3, Keenetic KN-1010 · Keenetic KN-1410 +3)
- [CVE-2024-4021](https://cve.now/CVE-2024-4021.md): Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 Configuration Setting ndmComponents.js information disclosure (CVSS 5.3, Keenetic KN-1010 · Keenetic KN-1410 +3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-04-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.