CVEs published May 11, 2024
28 CVEs were published on May 11, 2024: 2 critical, 5 high.
- Published
- 28
- Critical
- 2
- High
- 5
- Medium
- 19
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Huawei HarmonyOS · Huawei EMUI
- 16
- IBM Security Guardium
- 3
- IBM App Connect Enterprise
- 2
- brainstormforce Starter Templates – AI-Powered Templates fo…
- 1
- creativethemeshq Blocksy Companion
- 1
- DedeCMS
- 1
- Kognetiks Chatbot for WordPress
- 1
- stellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…
- 1
- Synaptics Fingerprint Driver
- 1
- thimpress Thim Kit for Elementor – Pre-built Templates & Wi…
- 1
Critical 2
High 5
- CVE-2023-47712IBM Security Guardium privilege escalationIBM Security Guardium
- CVE-2024-32997Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-52719Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentialitHuawei HarmonyOS · Huawei EMUI
- CVE-2024-32992Insufficient verification vulnerability in the baseband module Impact: Successful exploitation of this vulnerability will affect availabilitHuawei HarmonyOS · Huawei EMUI
- CVE-2024-32991Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availabHuawei HarmonyOS · Huawei EMUI
Medium, low and unrated 21
- CVE-2024-4790DedeCMS path traversalDedeCMS
- CVE-2023-47711IBM Security Guardium denial of serviceIBM Security Guardium
- CVE-2024-28760IBM App Connect Enterprise denial of serviceIBM App Connect Enterprise
- CVE-2024-28761IBM App Connect Enterprise HTML injectionIBM App Connect Enterprise
- CVE-2023-52721The WindowManager module has a vulnerability in permission control.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-4046Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32999Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32998NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-52720Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32996Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32995Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32993Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-52384Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-52383Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32990Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect Huawei HarmonyOS · Huawei EMUI
- CVE-2024-32989Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affecHuawei HarmonyOS · Huawei EMUI
- CVE-2024-4487Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploadscreativethemeshq Blocksy Companion
- CVE-2024-4329Thim Elementor Kit <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameterthimpress Thim Kit for Elementor – Pre-built Templates & Wi…
- CVE-2024-4630Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Starter Templates – AI-Powered Templates fo…
- CVE-2023-5447Use-After-Free in Service for Hardware Support App for Fingerprint DriverSynaptics Fingerprint Driver
- CVE-2024-4209Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timerstellarwp Kadence Blocks — Page Builder Toolkit for Gutenbe…