Skip to content
OpenAdvisories

Archive

12 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /12 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-25108

    Insufficient authorization allowing elevated access to resources in pixelfed

    Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functio…

    pixelfed pixelfed pixelfed/pixelfed Packagist
  • Critical 9.8
    CVE-2024-25110

    Azure IoT Platform Device SDK Remote Code Execution Vulnerability

    The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. …

    Azure azure-uamqp-c azure-iot-sdk-c azure-uamqp-python Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2023-6036 Public exploit

    Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

    The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authenticated attackers to…

    Web / CMS
  • Critical 9.8
    CVE-2024-24797

    WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3.

    G5Theme ERE Recently Viewed – Essential Real Estate Add-On
  • Critical 10.0
    CVE-2024-25100

    WordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WP Swings Coupon Referral Program allows Object Injection.This issue affects Coupon Referral Program: from n/a before 1.8.4.

    WP Swings Coupon Referral Program
  • Critical 9.8
    CVE-2024-23761

    Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email templa…

  • Critical 9.8
    CVE-2024-23763

    SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET re…

  • Critical 9.8
    CVE-2024-23759 Public exploit EPSS 48%

    Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" paramet…