CVEs published May 13, 2024
138 CVEs were published on May 13, 2024: 21 critical, 47 high.
- Published
- 138
- Critical
- 21
- High
- 47
- Medium
- 65
- Low
- 3
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 61
Most affected products
- Apple macOS
- 12
- cacti
- 12
- Linux
- 6
- Apple iOS and iPadOS · Apple macOS
- 5
- Apple iOS and iPadOS
- 4
- Ruijie RG-UAC
- 4
- AROX SOLUTION School ERP Pro+Responsive
- 3
- Campcodes Online Laundry Management System
- 3
- mantisbt · mantisbt/mantisbt
- 3
- nocodb
- 3
Critical 21
- CVE-2024-27810A path handling issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-27841The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2024-31810TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
- CVE-2024-35099TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
- CVE-2024-28285A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-re
- CVE-2024-34226SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to
- CVE-2024-34706@valtimo/components exposes access token to form.iovaltimo-platform valtimo-frontend-libraries · @valtimo/comp…
- CVE-2024-34340Authentication Bypass when using using older password hashescacti
- CVE-2024-29895Cacti command injection in cmd_realtime.phpcacti
- CVE-2024-25641Cacti RCE vulnerability when importing packagescacti
- CVE-2024-35049SurveyKing v1.3.1 was discovered to keep users' sessions active after logout.
- CVE-2024-4824SQL Injection in School ERP Pro+Responsive by AROX SOLUTIONAROX SOLUTION School ERP Pro+Responsive
- CVE-2024-4825Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from AgentejoAgentejo Cockpit CMS · cockpit-hq/cockpit
- CVE-2024-3263Improper authentication in YMS VIS ProYMS VIS Pro
- CVE-2024-31377WordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerabilityJ.N. Breetvelt a.k.a. OpaJaap WP Photo Album Plus
- CVE-2024-34411WordPress canvasio3D Light plugin <= 2.5.0 - Arbitrary File Upload vulnerabilityThomas Scholl canvasio3D Light
- CVE-2024-34416WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerabilityPk Favicon Manager
- CVE-2024-34440WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerabilityJordy Meow AI Engine: ChatGPT Chatbot
- CVE-2024-34555WordPress Z-Downloads plugin <= 1.11.3 - Auth. Arbitrary File Upload vulnerabilityURBAN BASE Z-Downloads
- CVE-2024-32700WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerabilityKognetiks Chatbot for WordPress
- CVE-2024-29212Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agVeeam Service Provider Console
High 47
- CVE-2024-27847This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2024-27796The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2024-27821A path handling issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS +1
- CVE-2024-27837A downgrade issue was addressed with additional code-signing restrictions.Apple macOS
- CVE-2024-27843A logic issue was addressed with improved checks.Apple macOS
- CVE-2024-27818The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2024-27822A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2024-27834The issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +3
- CVE-2024-27842The issue was addressed with improved checks.Apple macOS
- CVE-2024-27824This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2024-27804The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2024-27829The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-27825A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.Apple macOS
- CVE-2024-27798An authorization issue was addressed with improved state management.Apple macOS
- CVE-2024-23576HCL Commerce is potentially affected by a denial of service and information disclosure vulnerabilityHCL Software Commerce
- CVE-2024-28279Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.
- CVE-2024-22774An issue in Panoramic Corporation Digital Imaging Software v.9.1.2.7600 allows a local attacker to escalate privileges via the ccsservice.ex
- CVE-2024-29513An issue in briscKernelDriver.sys in BlueRiSC WindowsSCOPE Cyber Forensics before 3.3 allows a local attacker to execute arbitrary code with
- CVE-2024-34921TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.
- CVE-2024-34707Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pagesnautobot
- CVE-2024-34231A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr
- CVE-2023-49781NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vuenocodb
- CVE-2024-31771Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file
- CVE-2023-46870extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1
- CVE-2024-34224Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 all
- CVE-2024-34221Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.
- CVE-2024-33250An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to exe
- CVE-2024-34697Freescout vulnerable to Stored HTML Injection in Editing Received Emailsfreescout-helpdesk freescout
- CVE-2020-18305Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access,
- CVE-2024-34077MantisBT user account takeover in the signup/reset password processmantisbt · mantisbt/mantisbt
- CVE-2024-31459Cacti RCE vulnerability by file include in lib/plugin.phpcacti
- CVE-2024-31445SQL Injection vulnerability in automation_get_new_graphs_sqlcacti
- CVE-2024-30259FastDDS heap buffer overflow when publisher sends malformed packeteProsima Fast-DDS
- CVE-2024-30258FastDDS crash when publisher send malformed packeteProsima Fast-DDS
- CVE-2024-27082Cacti Cross-site Scripting vulnerability when managing treescacti
- CVE-2024-35050An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.
- CVE-2023-52656io_uring: drop any code related to SCM_RIGHTSLinux
- CVE-2022-4967strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (strongSwan
- CVE-2024-25581Transfer requests received over DoH can lead to a denial of service in DNSdistPowerDNS DNSdist
- CVE-2024-27401firewire: nosy: ensure user_length is taken into account when fetching packet contentsLinux
- CVE-2024-27400drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2Linux
- CVE-2024-27398Bluetooth: Fix use-after-free bugs caused by sco_sock_timeoutLinux
- CVE-2024-4068Memory Exhaustion in bracesmicromatch braces · braces
- CVE-2024-4747WordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerabilityPropovoice CRM
- CVE-2024-35205The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them t
- CVE-2024-34459An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7.
- CVE-2024-35204Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users c
Medium, low and unrated 70
- CVE-2024-27827This issue was addressed through improved state management.Apple macOS
- CVE-2024-27816A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS +2
- CVE-2024-23229This issue was addressed with improved redaction of sensitive information.Apple macOS
- CVE-2024-27789A logic issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2024-27835This issue was addressed through improved state management.Apple iOS and iPadOS
- CVE-2024-27839A privacy issue was addressed by moving sensitive data to a more secure location.Apple iOS and iPadOS
- CVE-2024-27803A permissions issue was addressed with improved validation.Apple iOS and iPadOS
- CVE-2024-23236A correctness issue was addressed with improved checks.Apple macOS
- CVE-2024-27852A privacy issue was addressed with improved client ID handling for alternative app marketplaces.Apple iOS and iPadOS
- CVE-2024-27813The issue was addressed with improved checks.Apple macOS
- CVE-2024-4840Rhosp-director: cleartext passwords exposed in logsopenstack-tripleo-heat-templates · Red Hat OpenStack Pla… +1
- CVE-2024-28276Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.
- CVE-2024-33433Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via th
- CVE-2024-28277In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subject_name= parameter, enabling Stored Cross-Site Sc
- CVE-2024-34709Directus Lacks Session Tokens Invalidationdirectus
- CVE-2024-34708Directus allows redacted data extraction on the API through "alias"directus
- CVE-2024-34230A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr
- CVE-2024-34704era-compiler-solidity contains a `xor(zext(cmp), -1)` misoptimizationmatter-labs era-compiler-solidity
- CVE-2024-25662Oxygen XML Web Author v26.0.0 and older and Oxygen Content Fusion v6.1 and older are vulnerable to Cross-Site Scripting (XSS) for malicious
- CVE-2024-34699GZ::CTF allows unprivileged user can perform XSS attacks by constructing malicious team names.GZTimeWalker GZCTF
- CVE-2024-34899WWBN AVideo 12.4 is vulnerable to Cross Site Scripting (XSS).wwbn/avideo
- CVE-2024-34225Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PHP and MySQL 1.0 allow
- CVE-2024-34222Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.
- CVE-2024-34223Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve
- CVE-2023-50718NocoDB SQL Injection vulnerabilitynocodb
- CVE-2023-50717NocoDB Allows Preview of File with Dangerous Contentnocodb
- CVE-2024-34701CreateWiki vulnerable to impersonation of wiki requestermiraheze CreateWiki
- CVE-2024-34698Prototype Pollution in getQueryParam Function (URL Query Parser)freescout-helpdesk freescout
- CVE-2024-34353matrix-sdk-crypto contains a log exposure of private key of the server-side key backupmatrix-org matrix-sdk-crypto · matrix-sdk-crypto
- CVE-2024-34081MantisBT Cross-site Scripting vulnerabilitymantisbt · mantisbt/mantisbt
- CVE-2024-34080MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actormantisbt · mantisbt/mantisbt
- CVE-2024-31460Cacti SQL Injection vulnerability in lib/api_automation.php caused by reading dirty data stored in databasecacti
- CVE-2024-31458Cacti SQL Injection vulnerability in lib/html_form_templates.php by reading dirty data stored in databasecacti
- CVE-2024-31444Cacti XSS vulnerability in lib/html.php by reading dirty data stored in databasecacti
- CVE-2024-31443Cacti XSS vulnerability in lib/html_tree.php by reading dirty data stored in databasecacti
- CVE-2024-30268Cacti XSS vulnerability in display_settingscacti
- CVE-2024-29894Cacti Cross-site Scripting vulnerability when using JavaScript based messaging APIcacti
- CVE-2024-4820SourceCodester Online Computer and Laptop Store unrestricted uploadSourceCodester Online Computer and Laptop Store
- CVE-2024-28866GoCD vulnerable to reflected Cross-site Scripting possible on server loading page during start-upgocd
- CVE-2024-4819Campcodes Online Laundry Management System admin_class.php improper authorizationCampcodes Online Laundry Management System
- CVE-2024-35048An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.
- CVE-2024-4818Campcodes Online Laundry Management System index.php file inclusionCampcodes Online Laundry Management System
- CVE-2024-4817Campcodes Online Laundry Management System HTTP Request Parameter manage_user.php resource injectionCampcodes Online Laundry Management System
- CVE-2024-4816Ruijie RG-UAC gre_add_commit.php os command injectionRuijie RG-UAC
- CVE-2024-4823Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTIONAROX SOLUTION School ERP Pro+Responsive
- CVE-2024-4822Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTIONAROX SOLUTION School ERP Pro+Responsive
- CVE-2024-4815Ruijie RG-UAC detail.php os command injectionRuijie RG-UAC
- CVE-2024-27399Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeoutLinux
- CVE-2023-52655usb: aqc111: check packet for fixup for true limitLinux
- CVE-2024-4067Regular Expression Denial of Service in micromatchmicromatch
- CVE-2024-35167WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <=1.4.8 - Cross Site Scripting (XSS) vulnerabilityEnvoThemes Envo's Elementor Templates & Widgets for WooComm…
- CVE-2024-35169WordPress All Bootstrap Blocks plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityall_bootstrap_blocks All Bootstrap Blocks
- CVE-2024-35170WordPress Sticky banner plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityHidden Depth Sticky banner
- CVE-2024-4814Ruijie RG-UAC static_route_edit_commit.php os command injectionRuijie RG-UAC
- CVE-2024-4813Ruijie RG-UAC interface_commit.php os command injectionRuijie RG-UAC
- CVE-2024-32100WordPress Easy Digital Downloads plugin <= 3.2.11 - Sensitive Data Exposure vulnerabilityEasy Digital Downloads
- CVE-2024-34812WordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerabilityRadiusTheme ShopBuilder – Elementor WooCommerce Builder Add…
- CVE-2024-35165WordPress Gutenify plugin <= 1.4.0 - Sensitive Data Exposure via API vulnerabilityGutenify
- CVE-2024-35166WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerabilityNinja Team Filebird
- CVE-2024-35171WordPress Academy LMS plugin <= 1.9.25 - Sensitive Data Exposure vulnerabilityAcademy LMS
- CVE-2024-35172WordPress ShortPixel Adaptive Images plugin <= 3.8.3 - Server Side Request Forgery (SSRF) vulnerabilityShortPixel Adaptive Images
- CVE-2024-34811WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP SMS
- CVE-2024-3462Authorization bypass in Ant Media ServerAnt Media Server Community Edition · io.antmedia:ant-media-…
- CVE-2024-34749Phormer prior to version 3.35 contains a cross-site scripting vulnerability.Aidin Phormer
- CVE-2023-5052Cross Site Scripting (XSS) in Servidor Uniforme ZeroUniform Server Zero
- CVE-2024-3239PostX < 4.0.2 - Contributor+ Stored XSSPost Grid Gutenberg Blocks and WordPress Blog Plugin
- CVE-2023-43040IBM Spectrum Fusion HCI improper access controlIBM Spectrum Fusion HCI
- CVE-2024-4809SourceCodester Open Source Clinic Management System setting.php unrestricted uploadSourceCodester Open Source Clinic Management System
- CVE-2024-4808Kashipara College Management System delete_faculty.php sql injectionKashipara College Management System
- CVE-2024-26306iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption