CVEs published May 9, 2024
226 CVEs were published on May 9, 2024: 20 critical, 77 high. 1 is now in CISA KEV.
- Published
- 226
- Critical
- 20
- High
- 77
- Medium
- 126
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 31
Most affected products
- Campcodes Complete Web-Based School Management System
- 14
- GitLab
- 6
- Linux
- 6
- CyberPower PowerPanel Enterprise
- 5
- CEMI Tomasz Pawełek CemiPark
- 3
- Kioware
- 3
- nvidia ChatRTX
- 3
- NVIDIA Triton Inference Server
- 3
- devitemsllc HT Mega Addons for Elementor – Elementor Widget…
- 2
- Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
- 2
Critical 20
- CVE-2024-4671Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2024-0087CVENVIDIA Triton Inference Server
- CVE-2024-3070Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injectionjottlieb Last Viewed Posts by WPBeginner
- CVE-2024-3806Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_postsP-THEMES Porto
- CVE-2022-32504An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2024-33874HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.
- CVE-2024-32622HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c
- CVE-2024-32621HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_bl
- CVE-2024-32615HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused by the earlier use o
- CVE-2024-34209TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortFilterRules function.
- CVE-2024-34213TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortForwardRules function.
- CVE-2024-32611HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.
- CVE-2024-34204TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setUpgradeFW function v
- CVE-2024-29164HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instruction pointer and causing
- CVE-2024-29159HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instruction pointer and causin
- CVE-2024-29157HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial
- CVE-2024-32735CyberPower PowerPanel Enterprise Missing AuthenticationCyberPower PowerPanel Enterprise
- CVE-2024-28075SolarWinds ARM Deserialization of Untrusted Data Remote Code ExecutionSolarWinds Access Rights Manager
- CVE-2024-34365Apache Karaf Cave: Cave SSRF and arbitrary file accessApache Software Foundation Apache Karaf Cave · org.apache.k…
- CVE-2024-3016NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settNEC Platforms ITK-6DGS-1(BK) TEL · NEC Platforms ITK-32… +20
High 77
- CVE-2024-0097CVEnvidia ChatRTX
- CVE-2024-0096CVEnvidia ChatRTX
- CVE-2024-3808Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via ShortcodeP-THEMES Porto Theme - Functionality
- CVE-2024-2290Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Admin+) PHP Object Injectionmonetizemore Advanced Ads – Ad Manager & AdSense
- CVE-2024-3809Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post MetaP-THEMES Porto Theme - Functionality
- CVE-2024-4397LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File Uploadthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2024-4441XML Sitemap & Google News <= 5.4.8 - Unauthenticated Local File Inclusionravanh XML Sitemap & Google News
- CVE-2024-3807Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post MetaP-THEMES Porto
- CVE-2024-3954Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.38 - Authenticated (Contributor+) PHP Object Injectionmetaphorcreations Ditty – Responsive News Tickers, Sliders,…
- CVE-2024-4605Breakdance <= 1.7.1 - Authenticated (Contributor+) Remote Code ExecutionBreakdance
- CVE-2022-32505An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32508An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32510An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32503An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32507An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32509An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2024-34220Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.
- CVE-2024-4545EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldrEnterpriseDB EDB Postgres Advanced Server
- CVE-2024-34338Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest parameter in /goform/
- CVE-2024-31954An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows.
- CVE-2024-33877HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.
- CVE-2024-33873HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.
- CVE-2024-32624HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.
- CVE-2024-32623HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.
- CVE-2024-32620HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the in
- CVE-2024-32619HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instructio
- CVE-2024-32618HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c, resulting in the corruption of the
- CVE-2024-32617HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup in H5MM.c (called from
- CVE-2024-32616HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c.
- CVE-2024-32614HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.
- CVE-2024-32613HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c, a different vulnerab
- CVE-2024-34200TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQosRules function.
- CVE-2024-34201TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConfig function.
- CVE-2024-32612HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c, resulting in the corruption of th
- CVE-2024-27397netfilter: nf_tables: use timestamp to check for set element timeoutLinux
- CVE-2024-27396net: gtp: Fix Use-After-Free in gtp_dellinkLinux
- CVE-2024-27395net: openvswitch: Fix Use-After-Free in ovs_ct_exitLinux
- CVE-2024-27394tcp: Fix Use-After-Free in tcp_ao_connect_initLinux
- CVE-2024-27393xen-netfront: Add missing skb_mark_for_recycleLinux
- CVE-2023-52654io_uring/af_unix: disable sending io_uring over socketsLinux
- CVE-2024-34205TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmware function.
- CVE-2024-32609HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.
- CVE-2024-32605HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).
- CVE-2024-34207TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDhcpConfig function.
- CVE-2024-34217TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function
- CVE-2024-29165HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32, resulting in the corruption of the instruction pointer and causing
- CVE-2024-29163HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find, resulting in the corruption of the instruction pointer and causing den
- CVE-2024-34215TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilterRules function.
- CVE-2024-29162HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read, resulting in denial of service or potential code execution.
- CVE-2024-29161HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table, resulting in the corruption of the instruction pointer and c
- CVE-2024-29160HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize, resulting in the corruption of the instruction pointer
- CVE-2024-29158HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing
- CVE-2024-34351Next.js Server-Side Request Forgery in Server Actionsvercel next.js · next
- CVE-2024-34350Next.js Vulnerable to HTTP Request Smugglingvercel next.js · next
- CVE-2024-32739CyberPower PowerPanel Enterprise SQL InjectionCyberPower PowerPanel Enterprise
- CVE-2024-32738CyberPower PowerPanel Enterprise SQL InjectionCyberPower PowerPanel Enterprise
- CVE-2024-32737CyberPower PowerPanel Enterprise SQL InjectionCyberPower PowerPanel Enterprise
- CVE-2024-32736CyberPower PowerPanel Enterprise SQL InjectionCyberPower PowerPanel Enterprise
- CVE-2024-3727Containers/image: digest type does not guarantee valid typeimage · Red Hat OADP-1.3-RHEL-9 +18
- CVE-2024-34345@cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerabilitycyclonedx-javascript-library · @cyclonedx/cyclonedx-library
- CVE-2024-32655Npgsql Vulnerable to SQL Injection via Protocol Message Size Overflownpgsql
- CVE-2024-34210TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate fun
- CVE-2024-34211TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attac
- CVE-2024-34212TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function.
- CVE-2024-34219TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log
- CVE-2024-23473SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability SolarWinds Access Rights Manager
- CVE-2024-32712WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerabilityPodlove Podcast Publisher
- CVE-2024-32724WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerabilityWoo product importer Sharkdropship dropshipping for Aliexpr…
- CVE-2024-34559WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerabilityGhost Foundation Ghost
- CVE-2024-29800WordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerabilityTimber Team & Contributors Timber · timber/timber
- CVE-2024-34431WordPress WP etracker plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWP-etracker WP etracker
- CVE-2024-3460In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing Kioware
- CVE-2024-3459KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened Kioware
- CVE-2024-4423Authentication bypass in CemiParkCEMI Tomasz Pawełek CemiPark
- CVE-2024-3903Add Custom CSS and JS <= 1.20 - Stored XSS via CSRFAdd Custom CSS and JS
- CVE-2024-29857An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA beforeorg.bouncycastle:bcprov-jdk18on · org.bouncycastle:bcpro… +8
- CVE-2024-30172An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78.org.bouncycastle:bcprov-jdk18on · org.bouncycastle:bcpro… +6
Medium, low and unrated 129
- CVE-2024-0098CVEnvidia ChatRTX
- CVE-2024-0088CVENVIDIA Triton Inference Server
- CVE-2024-0100CVENVIDIA Triton Inference Server
- CVE-2024-4688Campcodes Complete Web-Based School Management System conversation_history_admin.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4687Campcodes Complete Web-Based School Management System create_events.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-32985Stellar-core's Overlay - security fix for DDoS mitigationstellar-core
- CVE-2024-4686Campcodes Complete Web-Based School Management System emarks_range_grade_update_form.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4104ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scriptinggiuliopanda ADFO – Custom data in admin dashboard
- CVE-2024-4038Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro <= 5.3.1 - Unauthenticated Arbitrary Shortcode Executionpropluginslab Back In Stock Notifier for WooCommerce | WooC…
- CVE-2024-2785The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gateposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-1467Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgerybrainstormforce Starter Templates – AI-Powered Templates fo…
- CVE-2024-4463Squelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request ForgerySquelch Tabs and Accordions Shortcodes
- CVE-2024-4193Testimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingdavidanderson Testimonial Slider
- CVE-2024-4567Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcodethemifyme Themify Shortcodes
- CVE-2024-4082Joli FAQ SEO – WordPress FAQ Plugin <= 1.3.2 - Cross-Site Request Forgerywpjoli Joli FAQ SEO – WordPress FAQ Plugin
- CVE-2024-0445The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2024-2846Visual Footer Credit Remover <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scriptingupwerd Visual Footer Credit Remover
- CVE-2024-3923Beaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingbeaverbuilder Beaver Builder Page Builder – Drag and Drop W…
- CVE-2024-3990HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widgetdevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2024-1230SimpleShop <= 2.10.0 - Cross-Site Request Forgeryredbitcz SimpleShop
- CVE-2024-4335Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scriptingrankmath Rank Math SEO – AI SEO Tools to Dominate SEO Ranki…
- CVE-2024-4103ADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgerygiuliopanda ADFO – Custom data in admin dashboard
- CVE-2024-3915Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content UpdateSwift Ideas Swift Framework
- CVE-2024-2923Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widgetnalam-1 Magical Addons For Elementor
- CVE-2024-4411Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeMihdan: Yandex Turbo Feed
- CVE-2024-4339Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingbdthemes Prime Slider – Addons for Elementor
- CVE-2024-4314hostel <= 1.1.5.3 - Cross-Site Request Forgeryprasunsen Hostel
- CVE-2024-4446Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameterpt-guy Content Views – Post Grid & Filter, Recent Posts, Ca…
- CVE-2024-3831Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widgetthemelooks Enter Addons – Ultimate Template Builder for Ele…
- CVE-2024-3595Pure Chat – Live Chat Plugin & More! <= 2.22 - Authenticated (Subscriber+) Stored Cross-Site Scriptingpure-chat Pure Chat – Live Chat & More!
- CVE-2024-3722Swift Performance Lite <= 2.3.6.18 - Incorrect Authorization to Authenticated (Subscriber+) Settings Modificationswte Swift Performance Lite
- CVE-2024-4312Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgerydaext Soccer Engine – Soccer Plugin for WordPress
- CVE-2024-3916Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodesSwift Ideas Swift Framework
- CVE-2024-4383Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodewpinsider-1 Simple Membership
- CVE-2024-3952Advanced Ads – Ad Manager & AdSense <= 1.52.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Ad Widgetmonetizemore Advanced Ads – Ad Manager & AdSense
- CVE-2024-4041Yoast SEO <= 22.5 - Reflected Cross-Site ScriptingYoast SEO – Advanced SEO with real-time guidance and built-…
- CVE-2024-1229SimpleShop <= 2.10.2 - Missing Authorizationredbitcz SimpleShop
- CVE-2024-1166Image Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects Widgetblocksera Image Hover Effects – Elementor Addon
- CVE-2024-4386Gallery Block (Meow Gallery) <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingtigroumeow Meow Gallery
- CVE-2024-3974BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site ScriptingBuddyPress
- CVE-2024-4316EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameterwpdevteam EmbedPress – PDF Embedder, Embed YouTube Videos,…
- CVE-2024-3680Enter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tagthemelooks Enter Addons – Ultimate Template Builder for Ele…
- CVE-2023-6327ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_productsdevitemsllc ShopLentor – All-in-One WooCommerce Growth & St…
- CVE-2024-4158Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scriptingcreativethemeshq Blocksy
- CVE-2024-4150Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scriptingwpkube Simple Basic Contact Form
- CVE-2024-1693SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Updatesmartypants SP Project & Document Manager
- CVE-2024-4107Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptinghttps://elementor.com/ Elementor Website Builder Pro
- CVE-2024-3068Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scriptingmgibbs189 Custom Field Suite
- CVE-2024-3989HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justifydevitemsllc HT Mega Addons for Elementor – Elementor Widget…
- CVE-2024-4685Campcodes Complete Web-Based School Management System exam_timetable.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2022-32506An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2022-32502An issue was discovered on certain Nuki Home Solutions devices.
- CVE-2024-4684Campcodes Complete Web-Based School Management System exam_timetable_grade_wise.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4683Campcodes Complete Web-Based School Management System exam_timetable_insert_form.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-22910Cross Site Scripting (XSS) vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payloa
- CVE-2024-24157Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting (XSS) via
- CVE-2023-29881phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php.
- CVE-2024-31953An issue was discovered in Samsung Magician 8.0.0 on macOS.
- CVE-2024-31952An issue was discovered in Samsung Magician 8.0.0 on macOS.
- CVE-2024-4682Campcodes Complete Web-Based School Management System exam_timetable_update_form.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4681Campcodes Legal Case Management System Setting general-setting unrestricted uploadCampcodes Legal Case Management System
- CVE-2024-33876HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c.
- CVE-2024-33875HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c, resulting in the corruption of the instru
- CVE-2024-34202TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setMacFilterRules function.
- CVE-2024-34203TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setLanguageCfg function.
- CVE-2024-32610HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted instruction pointer.
- CVE-2024-34206TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the setWebWlanIdx function
- CVE-2024-32607HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c, resulting in the corruption of the instruction pointer.
- CVE-2024-32606HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools_str_sprint in tools/lib/h5tools_str.c (called from h5
- CVE-2024-29166HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode, resulting in the corruption of the instruction pointer and causing deni
- CVE-2024-33454Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stac
- CVE-2024-34354CMSaasStarter: JWT Token Not Verified on Server SessionCriticalMoments CMSaasStarter
- CVE-2024-34352Arbitrary file write vulnerability in 1Panel 1Panel-dev 1Panel · github.com/1Panel-dev/1Panel
- CVE-2024-4678Campcodes Complete Web-Based School Management System find_friends.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-34074Frappe vuilnerable to an open redirect on login pagefrappe
- CVE-2024-32874In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Serviceblakeblackshear frigate · frigate
- CVE-2024-31803Buffer Overflow vulnerability in emp-ot v.0.2.4 allows a remote attacker to execute arbitrary code via the FerretCOT<T>::read_pre_data128_fr
- CVE-2024-34218TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the NTPSyncWithHost functio
- CVE-2024-4677Campcodes Complete Web-Based School Management System my_student_exam_marks1.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4676Campcodes Complete Web-Based School Management System range_grade_text.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4317PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checksPostgreSQL
- CVE-2024-32717WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerabilityWPDeveloper SchedulePress
- CVE-2024-32719WordPress WP Club Manager plugin <= 2.2.11 - Broken Access Control vulnerabilityWP Club Manager
- CVE-2024-34549WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerabilityAutomattic WP Job Manager
- CVE-2024-34550WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerabilityAlexaCRM Dynamics 365 Integration
- CVE-2024-34556WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerabilityDmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
- CVE-2024-34433WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerabilityOCDI One Click Demo Import
- CVE-2024-4606WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerabilityBdThemes Ultimate Store Kit Elementor Addons
- CVE-2024-34439WordPress DS Site Message plugin <= 1.14.4 - Cross Site Request Forgery (CSRF) vulnerabilitydivSpot DS Site Message
- CVE-2024-34427WordPress WP Favorite Posts plugin <= 1.6.8 - Cross Site Request Forgery (CSRF) vulnerabilityHuseyin Berberoglu WP Favorite Posts
- CVE-2024-34557WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerabilityDmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
- CVE-2024-34415WordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityThimPress Thim Elementor Kit
- CVE-2024-34417WordPress Viet Nam Affiliate plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityToidicode.com (thanhtaivtt) Viet Nam Affiliate
- CVE-2024-34418WordPress WPCS ( WordPress Custom Search ) plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityTech9logy Creators WPCS
- CVE-2024-34419WordPress Configure Login Timeout plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityNathan Vonnahme Configure Login Timeout
- CVE-2024-4675Campcodes Complete Web-Based School Management System show_events.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-34420WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerabilitytalspotim Comments Evolved for WordPress
- CVE-2024-34421WordPress BlogLentor – Blog Designer Pack for Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitywpsurface BlogLentor
- CVE-2024-34422WordPress Viet Affiliate Link plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilitytrinhtuantai Viet Affiliate Link
- CVE-2024-34423WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilityphpbits Forty Four – 404 Plugin for WordPress
- CVE-2024-34424WordPress Featured Content Gallery plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerabilityiePlexus Featured Content Gallery
- CVE-2024-34425WordPress QuickieBar plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerabilityPhil Baylog QuickieBar
- CVE-2024-34426WordPress Brozzme Scroll Top plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerabilityBenoti Brozzme Scroll Top
- CVE-2024-34428WordPress AWSOM News Announcement plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilityHarknell AWSOM News Announcement
- CVE-2024-34429WordPress Simple Website Banner plugin <= 1.8.0.2 - Cross Site Scripting (XSS) vulnerabilityOrchestrated Corona Virus (COVID-19) Banner & Live Data
- CVE-2024-34430WordPress TT Custom Post Type Creator plugin <=1.0 - Cross Site Scripting (XSS) vulnerabilityRashed Latif TT Custom Post Type Creator
- CVE-2024-34432WordPress Better Elementor Addons plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerabilityBetterAddons Better Elementor Addons
- CVE-2024-34436WordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerabilitySKT Themes SKT Addons for Elementor
- CVE-2024-34437WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability10Web Form Builder Team Form Maker by 10Web
- CVE-2024-34441WordPress Easy Affiliate Links plugin <= 3.7.2 - Cross Site Scripting (XSS) vulnerabilityBootstrapped Ventures Easy Affiliate Links
- CVE-2024-34445WordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerabilitySKT Themes SKT Addons for Elementor
- CVE-2024-4674Campcodes Complete Web-Based School Management System show_friend_request.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-3461KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as tKioware
- CVE-2024-4673Campcodes Complete Web-Based School Management System show_student_grade_subject.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2024-4425Storing credentials in plaintext in CemiParkCEMI Tomasz Pawełek CemiPark
- CVE-2024-4424Stored XSS in CemiParkCEMI Tomasz Pawełek CemiPark
- CVE-2024-32672A Segmentation Fault issue discovered in Samsung Open Source Escargot JavaScript engine allows remote attackers to cause a denial of serSamsung Open Source Escargot
- CVE-2024-32669Possible stack overflow due to a string encoding processing errorSamsung Open Source Escargot
- CVE-2024-3590LetterPress <= 1.2.2 - Subscriber Deletion via CSRFLetterPress
- CVE-2024-3582Ungallery <= 2.2.4 - Stored XSS via CSRFUnGallery
- CVE-2023-5971Save as PDF < 3.2.0 - Admin+ Stored XSSSave as PDF Plugin by Pdfcrowd
- CVE-2024-4672Campcodes Complete Web-Based School Management System show_student_subject.php cross site scriptingCampcodes Complete Web-Based School Management System
- CVE-2023-6682Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2023-6688Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2024-2454Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2024-2651Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2024-4539Allocation of Resources Without Limits or Throttling in GitLabGitLab
- CVE-2024-4597Cross-Site Request Forgery (CSRF) in GitLabGitLab
- CVE-2024-30171An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78.org.bouncycastle:bctls-fips · org.bouncycastle:bcprov-jd… +8