CVEs published April 27, 2024
27 CVEs were published on April 27, 2024: 1 critical, 12 high.
- Published
- 27
- Critical
- 1
- High
- 12
- Medium
- 11
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Tenda i21
- 7
- PHPGurukul Doctor Appointment Management System
- 2
- BlueNet Technology Clinical Browsing System
- 1
- Brocade SANnav
- 1
- Contemporary Controls BASrouter BACnet BASRT-B
- 1
- cyanomiko dcnnt-py · dcnnt
- 1
- Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- 1
- IBM MQ Appliance
- 1
- jetmonsters Timetable and Event Schedule by MotoPress
- 1
- paragonie/ecc · mdanter/ecc
- 1
Critical 1
High 12
- CVE-2024-4291Tenda A301 setBlackRule formAddMacfilterRule stack-based overflowTenda A301
- CVE-2024-4252Tenda i22 formSetUrlFilterRule stack-based overflowTenda i22
- CVE-2024-4251Tenda i21 DhcpSetSe fromDhcpSetSer stack-based overflowTenda i21
- CVE-2024-25048IBM MQ code executionIBM MQ Appliance
- CVE-2024-4250Tenda i21 wifiSSIDset formwrlSSIDset stack-based overflowTenda i21
- CVE-2024-4249Tenda i21 wifiSSIDget formwrlSSIDget stack-based overflowTenda i21
- CVE-2024-4248Tenda i21 formQosManage_user stack-based overflowTenda i21
- CVE-2024-4247Tenda i21 formQosManage_auto stack-based overflowTenda i21
- CVE-2024-4246Tenda i21 formQosManageDouble_auto stack-based overflowTenda i21
- CVE-2024-4245Tenda i21 formQosManageDouble_user stack-based overflowTenda i21
- CVE-2022-48684An issue was discovered in Logpoint before 7.1.1.
- CVE-2022-48685An issue was discovered in Logpoint 7.1 before 7.1.2.
Medium, low and unrated 14
- CVE-2024-4294PHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injectionPHPGurukul Doctor Appointment Management System
- CVE-2024-4293PHPGurukul Doctor Appointment Management System appointment-bwdates-reports-details.php cross site scriptingPHPGurukul Doctor Appointment Management System
- CVE-2024-4292Contemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service denial of serviceContemporary Controls BASrouter BACnet BASRT-B
- CVE-2024-4257BlueNet Technology Clinical Browsing System deleteStudy.php sql injectionBlueNet Technology Clinical Browsing System
- CVE-2024-4256Techkshetra Info Solutions Savsoft Quiz Category Page editCategory cross site scriptingTechkshetra Info Solutions Savsoft Quiz
- CVE-2024-4255Ruijie RG-UAC gre_edit_commit.php os command injectionRuijie RG-UAC
- CVE-2024-3309Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widgetqodeinteractive Qi Addons For Elementor
- CVE-2023-1000cyanomiko dcnnt-py Notification notifications.py main command injectioncyanomiko dcnnt-py · dcnnt
- CVE-2024-3034BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversalwillmot BackUpWordPress
- CVE-2024-2838WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scriptingwpclever WPC Composite Products for WooCommerce
- CVE-2024-2258Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site ScriptingForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2024-2859By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)Brocade SANnav
- CVE-2023-52722An issue was discovered in Artifex Ghostscript before 10.03.1.
- CVE-2024-33851phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition.paragonie/ecc · mdanter/ecc