Skip to content
OpenAdvisories

Archive

27 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /27 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-26144 Public exploit

    Possible Sensitive Session Information Leak in Active Storage

    Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also …

    rails rails rails rails Debian Ubuntu RubyGems
  • Critical 10.0
    CVE-2024-1403 Public exploit

    Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

    In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a fa…

    Progress Software OpenEdge
  • High 7.8
    CVE-2024-0197 Public exploit

    Privilege Escalation in Thales SafeNet Sentinel HASP LDK

    A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access.

    Thales Sentinel HASP LDK
  • High 7.8
    CVE-2023-7016 Public exploit

    Privilege Escalation in SafeNet Authentication Client

    A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access.

    Thales SafeNet Authentication Client
  • Critical 9.8
    CVE-2023-51518 Public exploit

    Apache James server: Privilege escalation via JMX pre-authentication deserialisation

    Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data. Given a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privile…

    Apache Software Foundation Apache James server org.apache.james:james-server Maven
  • Critical 9.8
    CVE-2024-1698 Public exploit Scanner template EPSS 77%

    NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection

    The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 2.8.2 due to insufficient escaping…

    wpdevteam NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar Web / CMS
  • High 7.5
    CVE-2024-27356 Public exploit EPSS 24%

    An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially…

  • High 8.8
    CVE-2024-25723 Public exploit Scanner template EPSS 71%

    ZenML Server Remote Privilege Escalation Vulnerability

    ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in t…

    zenml PyPI