CVEs published May 16, 2024
227 CVEs were published on May 16, 2024: 14 critical, 75 high.
- Published
- 227
- Critical
- 14
- High
- 75
- Medium
- 128
- Low
- 10
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 20
Most affected products
- Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- 9
- Adobe Framemaker
- 8
- Adobe Animate
- 7
- parisneo/lollms-webui
- 7
- SourceCodester Simple Online Bidding System
- 7
- D-Link DAR-7000-40
- 6
- Intel(R) Power Gadget software for Windows
- 6
- Adobe Substance3D - Painter
- 4
- code-projects Simple Chat System
- 4
- Intel(R) Power Gadget software for macOS
- 4
Critical 14
- CVE-2024-22476Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially Intel(R) Neural Compressor software
- CVE-2024-5023Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCENetflix ConsoleMe · consoleme
- CVE-2023-48643Shrubbery tac_plus 2.x, 3.x.
- CVE-2024-35187Stalwart Mail Server has privilege escalation by designstalwartlabs mail-server
- CVE-2024-4999Ligowave Unity/Pro/Mimo/APC Arbitrary Command InjectionLigowave UNITY · Ligowave PRO +2
- CVE-2024-4826SQL injection vulnerability in Simple PHP Shopping CartAsaancart Simple PHP Shopping Cart
- CVE-2024-4992SQL injection vulnerability in SiAdminSiAdmin
- CVE-2024-4991SQL injection vulnerability in SiAdminSiAdmin
- CVE-2024-2361Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-2366Remote Code Execution in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-4078Arbitrary Code Execution in parisneo/lollmsparisneo/lollms · lollms
- CVE-2024-4326Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-2358Path Traversal leading to Remote Code Execution in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-4223Tutor LMS <= 2.7.0 - Missing Authorizationthemeum Tutor LMS – eLearning and online course solution
High 75
- CVE-2024-30060Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor
- CVE-2021-33158Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privilegIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2021-33145Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged usIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2022-37341Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privilegIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2021-33161Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privilIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2021-33157Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2021-33162Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an authentIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2021-33141Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unautIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2023-27504Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege viaIntel(R) BIOS Guard firmware
- CVE-2023-28402Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege viaIntel(R) BIOS Guard firmware
- CVE-2023-40071Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enableIntel(R) GPA software installers
- CVE-2023-43629Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially Intel(R) GPA software installers
- CVE-2023-43748Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentiaIntel(R) GPA Framework software installers
- CVE-2023-24460Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially Intel(R) GPA software installers
- CVE-2022-37410Improper access control for some Intel(R) Thunderbolt driver software before version 89 may allow an authenticated user to potentially enablIntel(R) Thunderbolt driver software
- CVE-2024-21813Exposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an authenticated user to potentially enable escalatiIntel(R) DTT software installers
- CVE-2023-41092Unchecked return value in SDM firmware for Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs before version 23.3 may allow an authenticated usIntel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs
- CVE-2023-45745Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enablIntel(R) TDX module software
- CVE-2023-46691Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation oIntel(R) Power Gadget software for Windows
- CVE-2023-42773Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escIntel(R) Power Gadget software for Windows
- CVE-2023-38581Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation Intel(R) Power Gadget software for Windows
- CVE-2023-46689Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalIntel(R) Power Gadget software for macOS
- CVE-2023-40070Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable Intel(R) Power Gadget software for macOS
- CVE-2023-45217Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escIntel(R) Power Gadget software for Windows
- CVE-2023-38654Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticatedsome Intel(R) PROSet/Wireless WiFi software for Windows
- CVE-2024-21864Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated usIntel(R) Arc(TM) & Iris(R) Xe Graphics software
- CVE-2024-22095Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel(R) Server D50DNP Family products may allow a priUEFI firmware for some Intel(R) Server D50DNP Family produc…
- CVE-2024-23980Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products may allow a privilegeUEFI firmware for some Intel(R) Server D50FCP Family produc…
- CVE-2024-24981Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some Intel(R) Server M50FCP Family products may allow a privileged uUEFI firmware for some Intel(R) Server M50FCP Family produc…
- CVE-2024-23487Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some Intel(R) Server D50DNP Family products may allow a priviUEFI firmware for some Intel(R) Server D50DNP Family produc…
- CVE-2024-22382Improper input validation in PprRequestLog module in UEFI firmware for some Intel(R) Server D50DNP Family products may allow a privileged usPprRequestLog module in UEFI firmware for some Intel(R) Ser…
- CVE-2024-21823Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation Xeon(R) processors Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th…
- CVE-2024-4733ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injectionplainware ShiftController Employee Shift Scheduling
- CVE-2024-1417Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS SafariWatchGuard AuthPoint Password Manager
- CVE-2024-3286 A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restartLenovo Printers
- CVE-2024-27260IBM AIX command executionIBM AIX
- CVE-2024-4956Nexus Repository 3 - Path TraversalSonatype Nexus Repository
- CVE-2024-3640Rockwell Automation FactoryTalk® Remote Access™ has Unquoted ExecutablesRockwell Automation FactoryTalk® Remote Access™
- CVE-2024-4609Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection VulnerabilityRockwell Automation FactoryTalk® View SE
- CVE-2024-34905FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page.
- CVE-2024-20389A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, loCisco ConfD · Cisco Network Services Orchestrator
- CVE-2024-20326A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, loCisco ConfD · Cisco Network Services Orchestrator
- CVE-2024-31142x86: Incorrect logic for BTC/SRSO mitigationsXen
- CVE-2024-30314Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Dreamweaver Desktop
- CVE-2024-30291Adobe FrameMaker TIF File parsing Out Of Bound WriteAdobe Framemaker
- CVE-2024-30292Adobe FrameMaker GIF File parsing Out Of Bound WriteAdobe Framemaker
- CVE-2024-30290Adobe FrameMaker WEBP File Parsing Out Of Bound WriteAdobe Framemaker
- CVE-2024-30288Adobe FrameMaker 3DS File Parsing Heap Memory CorruptionAdobe Framemaker
- CVE-2024-30289Adobe FrameMaker XLS File Parsing Buffer OverflowAdobe Framemaker
- CVE-2024-4838ConvertPlus <= 3.5.26 - Authenticated (Contributor+) PHP Object InjectionBrainstorm Force ConvertPlus
- CVE-2024-4352Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injectionthemeum Tutor LMS Pro
- CVE-2024-4222Tutor LMS Pro <= 2.7.0 - Missing Authorizationthemeum Tutor LMS Pro
- CVE-2024-4351Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalationthemeum Tutor LMS Pro
- CVE-2024-3435Path Traversal in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-3126Command Injection in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-3403Local File Inclusion in imartinez/privategptimartinez/privategpt
- CVE-2024-4181Command Injection in run-llama/llama_indexrun-llama/llama_index · llama-index +1
- CVE-2024-3848Path Traversal Bypass in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-4321Local File Inclusion (LFI) in gaizhenbiao/chuanhuchatgptgaizhenbiao/chuanhuchatgpt · chuanhuchatgpt
- CVE-2024-4322Path Traversal in parisneo/lollms-webuiparisneo/lollms-webui
- CVE-2024-30295When Animate parses FLA files, there is a UAF vulnerability caused by referencing uninitialized memory at Animate.exe+0x1149dcfAdobe Animate
- CVE-2024-30296When Animate parses FLA files, there is an out-of-bounds write vulnerability at animate+0x123df28Adobe Animate
- CVE-2024-30294Adobe Animate OGG File Parsing Heap Memory Corruption remote code execution VulnerabilityAdobe Animate
- CVE-2024-30297When Adobe Animate parses FLA files, there is a heap out-of-bounds write vulnerability at Animate.exe+0x125D391Adobe Animate
- CVE-2024-30293Adobe Animate 2024 AI File parsing Stack base buffer overflow Remote Code execution VulnerabilityAdobe Animate
- CVE-2024-30282Adobe Animate 2024 Out of Bound Write Remote Code Execution VulnerabilityAdobe Animate
- CVE-2024-30275Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg filesAdobe Aero Desktop
- CVE-2024-30307Adobe Substance 3D Painter BMP File Parsing Out Of Bounds Write VulnerabilityAdobe Substance3D - Painter
- CVE-2024-30274Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write VulnerabilityAdobe Substance3D - Painter
- CVE-2024-20791Illustrator 2024 BMP File Parsing Memory CorruptionAdobe Illustrator
- CVE-2024-20792Adobe Illustrator TIF File Parsing Use-After-Free Remote memory corruptionAdobe Illustrator
- CVE-2024-4844Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attackeTrellix ePolicy Orchestrator
- CVE-2024-3643Newsletter Popup <= 1.2 - List Deletion via CSRFNewsletter Popup
- CVE-2024-4318Tutor LMS <= 2.7.0 - Authenticated (Instructor+) SQL Injectionthemeum Tutor LMS – eLearning and online course solution
- CVE-2024-3750Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Executionthemeisle Visualizer: Tables and Charts Manager for WordPre…
Medium, low and unrated 138
- CVE-2024-3134Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinglitonice13 Master Addons For Elementor – Widgets, Extension…
- CVE-2021-33146Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unautIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2021-33142Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privilIntel(R) Ethernet Adapters and Intel(R) Ethernet Controller…
- CVE-2023-28383Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via Intel(R) BIOS PPAM firmware
- CVE-2023-35192Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user to potentially enableIntel(R) GPA Framework software
- CVE-2023-41961Uncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an authenticated user to potentially enable escalatioIntel(R) GPA software
- CVE-2023-47169Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of serIntel(R) Media SDK software
- CVE-2023-48727NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable informIntel(R) oneVPL software
- CVE-2023-47282Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated usIntel(R) oneVPL software
- CVE-2023-22656Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentiaIntel(R) Media SDK and some Intel(R) oneVPL software
- CVE-2023-45221Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilegIntel(R) Media SDK
- CVE-2023-48368Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of servicIntel(R) Media SDK software
- CVE-2023-43751Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before veIntel(R) Graphics Windows DCH driver software
- CVE-2023-42668Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chionboard video driver software for Intel(R) Server Boards ba…
- CVE-2023-42433Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to Endurance Gaming Mode software installers
- CVE-2024-22384Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 may allow an authenticIntel(R) Trace Analyzer and Collector software
- CVE-2024-22015Improper input validation for some Intel(R) DLB driver software before version 8.5.0 may allow an authenticated user to potentially denial oIntel(R) DLB driver software
- CVE-2023-39929Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially Libva software maintained by Intel
- CVE-2023-43745Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentially enable denial ofIntel(R) CBI software
- CVE-2023-41082Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable deniaIntel(R) CST software
- CVE-2023-39433Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalaIntel(R) CST software
- CVE-2023-43487Improper access control in some Intel(R) CST before version 2.1.10300 may allow an authenticated user to potentially enable denial of servicIntel(R) CST
- CVE-2023-40155Uncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalIntel(R) CST software
- CVE-2023-45743Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentiallyIntel(R) DSA software uninstallers
- CVE-2024-21814Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentiIntel(R) Chipset Device Software
- CVE-2023-45320Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authenticated user to potenIntel(R) VTune(TM) Profiler software
- CVE-2024-21818Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentially enable escalatioIntel(R) PCM software
- CVE-2023-47855Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enablIntel(R) TDX module software
- CVE-2023-38420Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable infIntel(R) Power Gadget software for macOS
- CVE-2023-41234NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable deIntel(R) Power Gadget software for Windows
- CVE-2023-45315Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enablIntel(R) Power Gadget software for Windwos
- CVE-2023-45846Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable denial of Intel(R) Power Gadget software for macOS
- CVE-2023-45736Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enaIntel(R) Power Gadget software for Windows
- CVE-2023-40536Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to poIntel(R) PROSet/Wireless WiFi software for Windows
- CVE-2023-38417Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentiaIntel(R) PROSet/Wireless WiFi software
- CVE-2023-45845Improper conditions check for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.20 may allow a privileged user to pIntel(R) Wireless Bluetooth(R) products for Windows
- CVE-2023-47210Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user tIntel(R) PROSet/Wireless WiFi software for linux
- CVE-2023-47859Improper access control for some Intel(R) Wireless Bluetooth products for Windows before version 23.20 may allow an authenticated user to poIntel(R) Wireless Bluetooth products for Windows
- CVE-2023-47165Improper conditions check in the Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enabIntel(R) Data Center GPU Max Series 1100 and 1550 products
- CVE-2024-21841Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticated user to potentiallIntel(R) Distribution for GDB software
- CVE-2024-22379Uncontrolled search path in some Intel(R) Inspector software before version 2024.0 may allow an authenticated user to potentially enable escIntel(R) Inspector software
- CVE-2024-21772Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalIntel(R) Advisor software
- CVE-2024-22390Improper input validation in firmware for some Intel(R) FPGA products before version 2.9.1 may allow denial of service.Intel(R) FPGA products
- CVE-2023-49614Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclIntel(R) FPGA products
- CVE-2023-45733Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial informatioIntel(R) Processors
- CVE-2023-46103Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potIntel(R) Core(TM) Ultra Processors
- CVE-2024-21774Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authentIntel(R) Processor Identification Utility software
- CVE-2024-21862Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated uIntel(R) Quartus(R) Prime Standard Edition Design software
- CVE-2024-21777Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user tIntel(R) Quartus(R) Prime Pro Edition Design software
- CVE-2024-21809Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated useIntel(R) Quartus(R) Prime Lite Edition Design software
- CVE-2024-21837Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user Intel(R) Quartus(R) Prime Lite Edition Design software
- CVE-2024-21828Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allow an authenticated usIntel(R) Ethernet Controller Administrative Tools software
- CVE-2024-21843Uncontrolled search path for some Intel(R) Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated userIntel(R) Computing Improvement Program software
- CVE-2024-21835Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable Intel(R) XTU software
- CVE-2024-21788Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalatioIntel(R) GPA software
- CVE-2024-21861Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user to potentially enableIntel(R) GPA Framework software
- CVE-2024-21831Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to poteIntel(R) Processor Diagnostic Tool software
- CVE-2023-22662Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board S2600BP products may allow a privileged user tUEFI firmware for some Intel(R) Server Board S2600BP produc…
- CVE-2024-21792Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to poteIntel(R) Neural Compressor software
- CVE-2024-3609ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing AuthorizationReviewX – Multi-Criteria Reviews for WooCommerce with Googl…
- CVE-2024-2619Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injectionbrainstormforce Ultimate Addons for Elementor
- CVE-2024-4204Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgeryithemelandco WPBULKiT – Bulk Edit WordPress Posts & Pages
- CVE-2024-31226Sunshine's unquoted executable path could lead to hijacked execution flowLizardByte Sunshine
- CVE-2023-47717IBM Security Guardium denial of serviceIBM Security Guardium
- CVE-2024-34760WordPress Magazine Blocks plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilityWPBlockart Magazine Blocks
- CVE-2024-34805WordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerabilityWebvitaly iFrame
- CVE-2024-34751WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerabilityWebToffee Order Export & Order Import for WooCommerce
- CVE-2024-34808WordPress JCH Optimize plugin <= 4.2.0 - Path Traversal vulnerabilitySamuel Marshall JCH Optimize
- CVE-2024-4603Excessive time spent checking DSA keys and parametersOpenSSL
- CVE-2024-34273njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.njwt
- CVE-2024-35185Denial of service of Minder Server with attacker-controlled REST endpointstacklok minder · github.com/stacklok/minder
- CVE-2024-35176REXML contains a denial of service vulnerabilityruby rexml · rexml
- CVE-2024-34957idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.
- CVE-2024-34958idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add
- CVE-2024-35039idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area.
- CVE-2024-34582Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Password feature.
- CVE-2023-46842x86 HVM hypercalls may trigger Xen bug checkXen
- CVE-2024-4760Voltage glitch during startup of the EEFC NVM controller can bypass the security bitMicrochip SAME70 · Microchip SAMS70 +10
- CVE-2024-4993SQL injection vulnerability in SiAdminSiAdmin
- CVE-2024-4580Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinglitonice13 Master Addons For Elementor – Widgets, Extension…
- CVE-2024-30283Adobe FrameMaker ICO File Parsing Heap Memory CorruptionAdobe Framemaker
- CVE-2024-30286Adobe FrameMaker DOC File Parsing Memory CorruptionAdobe Framemaker
- CVE-2024-30287Adobe FrameMaker PDF File Pparsing Out of Bound ReadAdobe Framemaker
- CVE-2024-4634Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
- CVE-2024-4400Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site ScriptingPost and Page Builder by BoldGrid – Visual Drag and Drop Ed…
- CVE-2024-4288Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scriptingcroixhaug Appointment Booking Calendar — Simply Schedule Ap…
- CVE-2024-4385Envo Extra <= 1.8.16 - Authenticated (Contributor+) Cross-Site Scriptingenvothemes Envo Extra
- CVE-2024-4617Rank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scriptingrankmath Rank Math SEO – AI SEO Tools to Dominate SEO Ranki…
- CVE-2024-35302In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possibleJetBrains TeamCity
- CVE-2024-35301In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App tokenJetBrains TeamCity
- CVE-2024-35300In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possibleJetBrains TeamCity
- CVE-2024-35299In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validationJetBrains YouTrack
- CVE-2024-4975code-projects Simple Chat System Message cross site scriptingcode-projects Simple Chat System
- CVE-2024-4974code-projects Simple Chat System register.php cross site scriptingcode-projects Simple Chat System
- CVE-2024-4973code-projects Simple Chat System register.php sql injectioncode-projects Simple Chat System
- CVE-2024-4263Improper Access Control in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2024-3851Unrestricted File Upload Leading to XSS in imartinez/privategptimartinez/privategpt
- CVE-2024-4972code-projects Simple Chat System login.php sql injectioncode-projects Simple Chat System
- CVE-2024-30298Adobe Animate SWF File Parsing Memory corruptionAdobe Animate
- CVE-2024-30281Substance3D - Designer | Out-of-bounds Read (CWE-125)Adobe Substance3D - Designer
- CVE-2024-4391Happy Addons for Elementor Authenticated (Contributor+) Stored-XSS <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar Widgetthehappymonster Happy Addons for Elementor
- CVE-2024-3887Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widgetwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2024-4968SourceCodester Interactive Map with Marker Add Marker Marker Name cross site scriptingSourceCodester Interactive Map with Marker
- CVE-2024-4967SourceCodester Interactive Map with Marker delete-mark.php sql injectionSourceCodester Interactive Map with Marker
- CVE-2024-30308Adobe Substance 3D Painter PSD File Parsing Acces Violation Read VulnerabilityAdobe Substance3D - Painter
- CVE-2024-30309Adobe Substance 3D Painter TGA File Parsing Acces Violation Read VulnerabilityAdobe Substance3D - Painter
- CVE-2024-20793Illustrator 2024 TIF file parsing Out Of Bound Read Information disclosure vulnerabilityAdobe Illustrator
- CVE-2024-4966SourceCodester SchoolWebTech home.php unrestricted uploadSourceCodester SchoolWebTech
- CVE-2024-4546Custom Post Type Attachment <= 3.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via pdf_attachment Shortcodeavimegladon Custom Post Type Attachment
- CVE-2024-4478Happy Addons for Elementor <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group Widgetthehappymonster Happy Addons for Elementor
- CVE-2024-4965D-Link DAR-7000-40 resmanage.php os command injectionD-Link DAR-7000-40
- CVE-2024-4964D-Link DAR-7000-40 urlblist.php unrestricted uploadD-Link DAR-7000-40
- CVE-2024-4963D-Link DAR-7000-40 url.php unrestricted uploadD-Link DAR-7000-40
- CVE-2024-4962D-Link DAR-7000-40 resmanage.php unrestricted uploadD-Link DAR-7000-40
- CVE-2024-4843ePO doesn't allow a regular privileged user to delete tasks or assignments.Trellix ePolicy Orchestrator
- CVE-2024-4961D-Link DAR-7000-40 onlineuser.php unrestricted uploadD-Link DAR-7000-40
- CVE-2024-3644Newsletter Popup <= 1.2 - Admin+ Stored XSSNewsletter Popup
- CVE-2024-3642Newsletter Popup <= 1.2 - Subscriber Deletion via CSRFNewsletter Popup
- CVE-2024-3641Newsletter Popup <= 1.2 - Unauthenticated Stored XSSNewsletter Popup
- CVE-2024-4635Menu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadMenu Icons by ThemeIsle
- CVE-2024-4279Tutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course Deletionthemeum Tutor LMS – eLearning and online course solution
- CVE-2024-4960D-Link DAR-7000-40 licenseauthorization.php unrestricted uploadD-Link DAR-7000-40
- CVE-2024-4946SourceCodester Online Art Gallery Management System adminHome.php unrestricted uploadSourceCodester Online Art Gallery Management System
- CVE-2024-4945SourceCodester Best Courier Management System view_parcel.php unrestricted uploadSourceCodester Best Courier Management System
- CVE-2024-4933SourceCodester Simple Online Bidding System sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-4932SourceCodester Simple Online Bidding System sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-4931SourceCodester Simple Online Bidding System sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-4930SourceCodester Simple Online Bidding System sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-4929SourceCodester Simple Online Bidding System cross-site request forgerySourceCodester Simple Online Bidding System
- CVE-2024-4928SourceCodester Simple Online Bidding System sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-4927SourceCodester Simple Online Bidding System unrestricted uploadSourceCodester Simple Online Bidding System
- CVE-2024-4984Yoast SEO <= 22.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingYoast SEO – Advanced SEO with real-time guidance and built-…
- CVE-2024-4926SourceCodester School Intramurals Student Attendance Management System manage_student.php sql injectionSourceCodester School Intramurals Student Attendance Manage…
- CVE-2024-4925SourceCodester School Intramurals Student Attendance Management System manage_course.php sql injectionSourceCodester School Intramurals Student Attendance Manage…
- CVE-2024-4923Codezips E-Commerce Site addproduct.php unrestricted uploadCodezips E-Commerce Site
- CVE-2024-4922SourceCodester Simple Image Stack Website cross site scriptingSourceCodester Simple Image Stack Website
- CVE-2024-4921SourceCodester Employee and Visitor Gate Pass Logging System unrestricted uploadSourceCodester Employee and Visitor Gate Pass Logging System
- CVE-2024-4920SourceCodester Online Discussion Forum Site registerH.php unrestricted uploadSourceCodester Online Discussion Forum Site