Skip to content
OpenAdvisories

Archive

29 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /29 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2024-27292 Public exploit Scanner template EPSS 69%

    Docassemble unauthorized access through URL manipulation

    Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been…

    jhpyle docassemble docassemble-webapp docassemble-base PyPI
  • High 8.8
    CVE-2024-1939 Public exploit

    Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corr…

    Google Chrome chromium chromium Browsers Debian Wolfi
  • Medium 6.1
    CVE-2023-51800 Public exploit

    Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arb…

  • Medium 6.1
    CVE-2023-51802 Public exploit

    Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to exec…

  • Critical 9.8
    CVE-2023-51801 Public exploit

    SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary…

  • Critical 9.6
    CVE-2024-25292 Public exploit

    Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML…

  • Critical 9.8
    CVE-2024-25291 Public exploit

    Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.

  • Critical 9.8
    CVE-2024-25180 Public exploit

    An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf…