Skip to content
OpenAdvisories

Archive

28 February 2024

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-25202 Public exploit

    Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attack…

  • Critical 9.8
    CVE-2024-25169 Public exploit

    Mezzanine allows attackers to bypass access control mechanisms

    An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

  • High 8.8
    CVE-2024-25832 Public exploit EPSS 13%

    F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to…

  • Critical 9.1
    CVE-2024-25170 Public exploit

    Mezzanine allows attackers to bypass access controls via manipulating the Host header

    An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header.

  • Critical 9.8
    CVE-2024-25830 Public exploit EPSS 24%

    F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An un…

  • Critical 9.8
    CVE-2024-25422 Public exploit

    SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive inf…

  • High 8.1
    CVE-2024-22983 Public exploit

    SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalat…

  • Medium 6.5
    CVE-2024-22532 Public exploit

    Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service …