CVEs published in May 2024
40 tracked CVEs from 10 vendors had their first vendor advisory published in May 2024: 2 critical, 20 high, 2 in CISA KEV. Newest first.
9 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2024-2961High
GNU C Library (glibc) Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-35200Medium
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests
F5 · 1 advisory - Added
CVE-2024-34161Medium
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a Maximum…
F5 · 1 advisory - Added
CVE-2024-32760Medium
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions
F5 · 1 advisory - Added
CVE-2024-31079Medium
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests
F5 · 1 advisory - Added
CVE-2024-24919HighCISA KEV
Check Point Quantum Security Gateways Information Disclosure Vulnerability
Check Point · 1 advisory - Added
CVE-2024-33602High
GNU C Library (glibc) Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-33599High
GNU C Library (glibc) Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-22262High
Spring Framework Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-22259Critical
Spring Framework Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-22243Critical
Spring Framework Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-2048High
HashiCorp Vault Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-21683High
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server
Atlassian · 1 advisory - Added
CVE-2024-22274High
VMware vCenter Server: The vCenter Server contains an authenticated remote code execution vulnerability
VMware · 1 advisory - Added
CVE-2024-27130High
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2024-27129Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2024-27128Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2024-27127High
QTS: double free vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-21902Medium
QTS: incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system…
QNAP · 1 advisory - Added
CVE-2024-30040HighCISA KEV
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2023-45583Medium
Fortinet · 2 advisories - Added
CVE-2023-36640Medium
Fortinet · 2 advisories - Added
CVE-2024-33612Medium
improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may
F5 · 1 advisory - Added
CVE-2024-33608High
When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate
F5 · 1 advisory - Added
CVE-2024-33604Medium
reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility
F5 · 1 advisory - Added
CVE-2024-32761Medium
BIG-IP: Under certain conditions, a data leak
F5 · 1 advisory - Added
CVE-2024-32049High
BIG-IP Next Central Manager (CM) may
F5 · 1 advisory - Added
CVE-2024-31156High
stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility
F5 · 2 advisories - Added
CVE-2024-28889Medium
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along…
F5 · 1 advisory - Added
CVE-2024-28883High
origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may
F5 · 1 advisory - Added
CVE-2024-28132Medium
Exposure of Sensitive Information vulnerability exists in the GSLB container, which may
F5 · 1 advisory - Added
CVE-2024-27202Medium
DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility
F5 · 1 advisory - Added
CVE-2024-26026High
BIG-IP Next: SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI).
F5 · 1 advisory - Added
CVE-2024-25560High
When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic
F5 · 1 advisory - Added
CVE-2024-21793High
BIG-IP Next: OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI).
F5 · 1 advisory - Added
CVE-2023-47220Medium
OS command injection vulnerability has been reported to affect Media Streaming add-on.
QNAP · 1 advisory - Added
CVE-2023-32154High
RouterOS: Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability.
MikroTik · 1 advisory - Added
CVE-2024-2398High
curl Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-33516Medium
ArubaOS: unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed
Aruba · 1 advisory - Added
CVE-2024-24912Medium
local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10…
Check Point · 1 advisory