CVEs published May 26, 2024
47 CVEs were published on May 26, 2024: 0 critical, 2 high.
- Published
- 47
- Critical
- 0
- High
- 2
- Medium
- 44
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Kashipara College Management System
- 10
- Mattermost
- 9
- anji-plus AJ-Report
- 6
- PHPGurukul Zoo Management System
- 5
- SourceCodester Best House Rental Management System
- 4
- itsourcecode Student Information Management System
- 1
- JFinalCMS
- 1
- jsy-1 short-url
- 1
- lakernote EasyAdmin
- 1
- mintplex-labs/anything-llm
- 1
High 2
- CVE-2024-36054Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory (and consequently ga
- CVE-2024-34454Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a
Medium, low and unrated 45
- CVE-2024-5384SourceCodester Facebook News Feed Like index.php sql injectionSourceCodester Facebook News Feed Like
- CVE-2024-5383lakernote EasyAdmin upload cross site scriptinglakernote EasyAdmin
- CVE-2024-36056Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c40649
- CVE-2024-36055Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory with read/write acc
- CVE-2024-5381itsourcecode Student Information Management System view.php sql injectionitsourcecode Student Information Management System
- CVE-2024-5380jsy-1 short-url admin.php cross site scriptingjsy-1 short-url
- CVE-2024-4286Improper Neutralization of Special Elements in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2024-5379JFinalCMS template cross site scriptingJFinalCMS
- CVE-2024-5378SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injectionSourceCodester School Intramurals Student Attendance Manage…
- CVE-2024-5377SourceCodester Vehicle Management System newvehicle.php unrestricted uploadSourceCodester Vehicle Management System
- CVE-2024-5376Kashipara College Management System view_each_faculty.php cross site scriptingKashipara College Management System
- CVE-2024-5375Kashipara College Management System submit_student.php cross site scriptingKashipara College Management System
- CVE-2024-5374Kashipara College Management System submit_new_faculty.php cross site scriptingKashipara College Management System
- CVE-2024-5373Kashipara College Management System submit_login.php cross site scriptingKashipara College Management System
- CVE-2024-5372Kashipara College Management System submit_extracurricular_activity.php cross site scriptingKashipara College Management System
- CVE-2024-5371Kashipara College Management System submit_enroll_student.php cross site scriptingKashipara College Management System
- CVE-2024-5370Kashipara College Management System submit_enroll_staff.php cross site scriptingKashipara College Management System
- CVE-2024-5369Kashipara College Management System submit_admin.php cross site scriptingKashipara College Management System
- CVE-2024-5368Kashipara College Management System delete_faculty.php cross site scriptingKashipara College Management System
- CVE-2024-5367Kashipara College Management System each_extracurricula_activities.php cross site scriptingKashipara College Management System
- CVE-2024-5366SourceCodester Best House Rental Management System edit-cate.php sql injectionSourceCodester Best House Rental Management System
- CVE-2024-29215Slash commands run in channel without channel membership via playbook task commandsMattermost
- CVE-2024-36255Post actions can run playbook checklist task commandsMattermost
- CVE-2024-36241/playbook add slash command allows viewing arbitrary post contentsMattermost
- CVE-2024-31859Member promoted to channel admin via playbooks run linking to channelMattermost
- CVE-2024-5270SAML to email switch possible when email signin is disabledMattermost
- CVE-2024-5272Run Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"Mattermost
- CVE-2024-32045Playbook run link to private channel grants channel accessMattermost
- CVE-2024-34152Playbook Run Metadata leak to GuestMattermost
- CVE-2024-34029AD/LDAP Group Members LeakMattermost
- CVE-2024-5365SourceCodester Best House Rental Management System manage_payment.php sql injectionSourceCodester Best House Rental Management System
- CVE-2024-5364SourceCodester Best House Rental Management System manage_tenant.php sql injectionSourceCodester Best House Rental Management System
- CVE-2024-5363SourceCodester Best House Rental Management System manage_user.php sql injectionSourceCodester Best House Rental Management System
- CVE-2024-5362SourceCodester Online Hospital Management System departmentDoctor.php sql injectionSourceCodester Online Hospital Management System
- CVE-2024-5361PHPGurukul Zoo Management System normal-bwdates-reports-details.php sql injectionPHPGurukul Zoo Management System
- CVE-2024-5360PHPGurukul Zoo Management System foreigner-bwdates-reports-details.php sql injectionPHPGurukul Zoo Management System
- CVE-2024-5359PHPGurukul Zoo Management System foreigner-search.php sql injectionPHPGurukul Zoo Management System
- CVE-2024-5358PHPGurukul Zoo Management System normal-search.php sql injectionPHPGurukul Zoo Management System
- CVE-2024-5357PHPGurukul Zoo Management System forgot-password.php sql injectionPHPGurukul Zoo Management System
- CVE-2024-5356anji-plus AJ-Report testTransform;swagger-ui sql injectionanji-plus AJ-Report
- CVE-2024-5355anji-plus AJ-Report IGroovyHandler command injectionanji-plus AJ-Report
- CVE-2024-5354anji-plus AJ-Report detailByCode information disclosureanji-plus AJ-Report
- CVE-2024-5353anji-plus AJ-Report ZIP File decompress path traversalanji-plus AJ-Report
- CVE-2024-5352anji-plus AJ-Report validationRules deserializationanji-plus AJ-Report
- CVE-2024-5351anji-plus AJ-Report Javascript getValueFromJs deserializationanji-plus AJ-Report