CVE List - 2024 / April
Showing 1301 - 1400 of 3606 CVEs for April 2024 (Page 14 of 37)
CVE ID | Date | Title |
---|---|---|
CVE-2024-1424 | 2024-04-09 | The GiveWP – Donation Plugin and Fundraising Platform plugin for... |
CVE-2024-0873 | 2024-04-09 | The Watu Quiz plugin for WordPress is vulnerable to Stored... |
CVE-2024-1792 | 2024-04-09 | The CMB2 plugin for WordPress is vulnerable to PHP Object... |
CVE-2024-2504 | 2024-04-09 | The Page Builder: Pagelayer – Drag and Drop website builder... |
CVE-2023-6965 | 2024-04-09 | The Pods – Custom Content Types and Fields plugin for... |
CVE-2024-2117 | 2024-04-09 | The Elementor Website Builder – More than Just a Page... |
CVE-2024-2654 | 2024-04-09 | The File Manager plugin for WordPress is vulnerable to Directory... |
CVE-2024-2344 | 2024-04-09 | The Avada theme for WordPress is vulnerable to SQL Injection... |
CVE-2024-3208 | 2024-04-09 | The Sydney Toolbox plugin for WordPress is vulnerable to Stored... |
CVE-2024-2501 | 2024-04-09 | The Hubbub Lite – Fast, Reliable Social Sharing Buttons plugin... |
CVE-2024-1812 | 2024-04-09 | The Everest Forms plugin for WordPress is vulnerable to Server-Side... |
CVE-2023-6486 | 2024-04-09 | The Spectra – WordPress Gutenberg Blocks plugin for WordPress is... |
CVE-2024-2327 | 2024-04-09 | The Global Elementor Buttons plugin for WordPress is vulnerable to... |
CVE-2024-2946 | 2024-04-09 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12... |
CVE-2023-6999 | 2024-04-09 | The Pods – Custom Content Types and Fields plugin for... |
CVE-2024-1461 | 2024-04-09 | The Elementor Addons by Livemesh plugin for WordPress is vulnerable... |
CVE-2024-2039 | 2024-04-09 | The Stackable – Page Builder Gutenberg Blocks plugin for WordPress... |
CVE-2024-2792 | 2024-04-09 | The Elementor Addon Elements plugin for WordPress is vulnerable to... |
CVE-2024-2456 | 2024-04-09 | The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable... |
CVE-2024-1458 | 2024-04-09 | The Elementor Addons by Livemesh plugin for WordPress is vulnerable... |
CVE-2024-2081 | 2024-04-09 | The Best WordPress Gallery Plugin – FooGallery plugin for WordPress... |
CVE-2024-1984 | 2024-04-09 | The Graphene theme for WordPress is vulnerable to unauthorized access... |
CVE-2024-2341 | 2024-04-09 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin... |
CVE-2024-3213 | 2024-04-09 | The Relevanssi – A Better Search plugin for WordPress is... |
CVE-2024-2093 | 2024-04-09 | The VK All in One Expansion Unit plugin for WordPress... |
CVE-2024-2787 | 2024-04-09 | The Happy Addons for Elementor plugin for WordPress is vulnerable... |
CVE-2024-2347 | 2024-04-09 | The Astra theme for WordPress is vulnerable to Stored Cross-Site... |
CVE-2024-3267 | 2024-04-09 | The Bold Page Builder plugin for WordPress is vulnerable to... |
CVE-2024-0952 | 2024-04-09 | The WP ERP | Complete HR solution with recruitment &... |
CVE-2024-1498 | 2024-04-09 | The Happy Addons for Elementor plugin for WordPress is vulnerable... |
CVE-2024-1352 | 2024-04-09 | The Classified Listing – Classified ads & Business Directory Plugin... |
CVE-2024-2306 | 2024-04-09 | The Revslider plugin for WordPress is vulnerable to Stored Cross-Site... |
CVE-2024-2138 | 2024-04-09 | The JetWidgets For Elementor plugin for WordPress is vulnerable to... |
CVE-2024-2311 | 2024-04-09 | The Avada theme for WordPress is vulnerable to Stored Cross-Site... |
CVE-2024-3545 | 2024-04-09 | Improper permission handling in the vault offline cache feature in... |
CVE-2023-6695 | 2024-04-09 | The Beaver Themer plugin for WordPress is vulnerable to Sensitive... |
CVE-2024-1412 | 2024-04-09 | The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site... |
CVE-2023-6694 | 2024-04-09 | The Beaver Themer plugin for WordPress is vulnerable to Stored... |
CVE-2022-4965 | 2024-04-09 | The Invitation Code Content Restriction Plugin from CreativeMinds plugin for... |
CVE-2024-3446 | 2024-04-09 | Qemu: virtio: dma reentrancy issue leads to double free vulnerability |
CVE-2024-3521 | 2024-04-09 | Byzoro Smart S80 Management Platform userattestation.php unrestricted upload |
CVE-2024-3313 | 2024-04-09 | SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component |
CVE-2024-3522 | 2024-04-09 | Campcodes Online Event Management System process.php sql injection |
CVE-2024-3523 | 2024-04-09 | Campcodes Online Event Management System index.php sql injection |
CVE-2024-3524 | 2024-04-09 | Campcodes Online Event Management System process.php cross site scripting |
CVE-2024-3119 | 2024-04-09 | Stack-Buffer Overflow in 'Call-ID' and 'X-Call-ID' SIP Header Processing in sngrep |
CVE-2024-3120 | 2024-04-09 | Stack-Buffer Overflow in 'Content-Length' and 'Warning' Header Processing in sngrep |
CVE-2023-52070 | 2024-04-10 | JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via... |
CVE-2024-23076 | 2024-04-10 | JFreeChart v1.5.4 was discovered to contain a NullPointerException via the... |
CVE-2024-23077 | 2024-04-10 | JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via... |
CVE-2024-23080 | 2024-04-10 | Joda Time v2.12.5 was discovered to contain a NullPointerException via... |
CVE-2024-23083 | 2024-04-10 | Time4J Base v5.9.3 was discovered to contain a NullPointerException via... |
CVE-2024-23734 | 2024-04-10 | Cross Site Request Forgery vulnerability in in the upload functionality... |
CVE-2024-23735 | 2024-04-10 | Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate... |
CVE-2024-26362 | 2024-04-10 | HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2... |
CVE-2024-27474 | 2024-04-10 | Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF).... |
CVE-2024-27476 | 2024-04-10 | Leantime 3.0.6 is vulnerable to HTML Injection via /dashboard/show#/tickets/newTicket. |
CVE-2024-27477 | 2024-04-10 | In Leantime 3.0.6, a Cross-Site Scripting vulnerability exists within the... |
CVE-2024-28344 | 2024-04-10 | An Open Redirect vulnerability was found in Sipwise C5 NGCP... |
CVE-2024-28345 | 2024-04-10 | An issue discovered in Sipwise C5 NGCP Dashboard below mr11.5.1... |
CVE-2024-29269 | 2024-04-10 | An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows... |
CVE-2024-29296 | 2024-04-10 | A user enumeration vulnerability was found in Portainer CE 2.19.4.... |
CVE-2024-29460 | 2024-04-10 | An issue in PX4 Autopilot v.1.14.0 allows an attacker to... |
CVE-2024-29504 | 2024-04-10 | Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows... |
CVE-2024-31819 | 2024-04-10 | An issue in WWBN AVideo v.12.4 through v.14.2 allows a... |
CVE-2024-29500 | 2024-04-10 | An issue in the kiosk mode of Secure Lockdown Multi... |
CVE-2024-29502 | 2024-04-10 | An issue in Secure Lockdown Multi Application Edition v2.00.219 allows... |
CVE-2024-3525 | 2024-04-10 | Campcodes Online Event Management System index.php cross site scripting |
CVE-2023-40148 | 2024-04-10 | PingFederate Server Side Request Forgery vulnerability |
CVE-2024-3526 | 2024-04-10 | Campcodes Online Event Management System index.php cross site scripting |
CVE-2024-3528 | 2024-04-10 | Campcodes Complete Online Student Management System units_view.php cross site scripting |
CVE-2024-3529 | 2024-04-10 | Campcodes Complete Online Student Management System students_view.php cross site scripting |
CVE-2024-3530 | 2024-04-10 | Campcodes Complete Online Student Management System Marks_view.php cross site scripting |
CVE-2023-6236 | 2024-04-10 | Eap: oidc app attempting to access the second tenant, the user should be prompted to log |
CVE-2023-50347 | 2024-04-10 | Insecure SQL Interface affects HCL DRYiCE MyXalytics |
CVE-2024-3531 | 2024-04-10 | Campcodes Complete Online Student Management System courses_view.php cross site scripting |
CVE-2024-3532 | 2024-04-10 | Campcodes Complete Online Student Management System attendance_view.php cross site scripting |
CVE-2024-3533 | 2024-04-10 | Campcodes Complete Online Student Management System academic_year_view.php cross site scripting |
CVE-2024-3534 | 2024-04-10 | Campcodes Church Management System login.php sql injection |
CVE-2024-3535 | 2024-04-10 | Campcodes Church Management System index.php sql injection |
CVE-2024-2665 | 2024-04-10 | The Premium Addons for Elementor plugin for WordPress is vulnerable... |
CVE-2024-2664 | 2024-04-10 | The Premium Addons for Elementor plugin for WordPress is vulnerable... |
CVE-2024-3536 | 2024-04-10 | Campcodes Church Management System delete_log.php sql injection |
CVE-2024-2666 | 2024-04-10 | The Premium Addons for Elementor plugin for WordPress is vulnerable... |
CVE-2024-2733 | 2024-04-10 | The Bold Page Builder plugin for WordPress is vulnerable to... |
CVE-2024-3537 | 2024-04-10 | Campcodes Church Management System admin_user.php sql injection |
CVE-2024-1041 | 2024-04-10 | The WP Radio – Worldwide Online Radio Stations Directory for... |
CVE-2024-2734 | 2024-04-10 | The Bold Page Builder plugin for WordPress is vulnerable to... |
CVE-2024-2735 | 2024-04-10 | The Bold Page Builder plugin for WordPress is vulnerable to... |
CVE-2024-2736 | 2024-04-10 | The Bold Page Builder plugin for WordPress is vulnerable to... |
CVE-2024-3235 | 2024-04-10 | The Essential Grid Gallery WordPress Plugin plugin for WordPress is... |
CVE-2024-1042 | 2024-04-10 | The WP Radio – Worldwide Online Radio Stations Directory for... |
CVE-2024-3020 | 2024-04-10 | The plugin is vulnerable to PHP Object Injection in versions... |
CVE-2024-3538 | 2024-04-10 | Campcodes Church Management System addTithes.php sql injection |
CVE-2024-21509 | 2024-04-10 | Versions of the package mysql2 before 3.9.4 are vulnerable to... |
CVE-2024-21507 | 2024-04-10 | Versions of the package mysql2 before 3.9.3 are vulnerable to... |
CVE-2023-6385 | 2024-04-10 | WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF |
CVE-2024-2428 | 2024-04-10 | The Ultimate Video Player For WordPress < 2.2.3 - Contributor+ Stored XSS |
CVE-2024-3539 | 2024-04-10 | Campcodes Church Management System addgiving.php sql injection |
CVE-2024-3540 | 2024-04-10 | Campcodes Church Management System add_sundaysch.php sql injection |