Skip to content
OpenAdvisories

Archive

29 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /29 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-0864

    RCE in Laragon

    Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example. By default, Laragon is not vulnerable until a …

    Leo Khoa Laragon
  • Critical 9.8
    CVE-2024-1981

    The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' par…

    wpvividplugins Migration, Backup, Staging – WPvivid Web / CMS
  • Critical 9.8
    CVE-2023-52480

    ksmbd: fix race condition between session lookup and expire

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_sess…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.1
    CVE-2023-6090

    WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload

    Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11.

    Mollie Mollie Payments for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-51801 Public exploit

    SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary…

  • Critical 9.8
    CVE-2024-24525

    An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code v…

  • Critical 9.8
    CVE-2024-25239

    SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL com…

  • Critical 9.6
    CVE-2024-25292 Public exploit

    Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML…

  • Critical 9.8
    CVE-2024-25291 Public exploit

    Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.

  • Critical 9.8
    CVE-2024-25180 Public exploit

    An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf…

  • Critical 9.8
    CVE-2024-26548

    An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafte…