Skip to content
OpenAdvisories

Archive

5 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /5 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.8
    CVE-2024-23296 Exploited Public exploit

    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Mar 6, 2024
  • Critical 9.8
    CVE-2024-2054 Public exploit EPSS 81%

    Artica Proxy Unauthenticated PHP Deserialization Vulnerability

    The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.

    Artica Tech Artica Proxy
  • High 7.5
    CVE-2024-2053 Public exploit Scanner template EPSS 45%

    Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability

    The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy adminis…

    Artica Tech Artica Proxy
  • High 8.8
    CVE-2023-43318 Public exploit

    TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification o…

  • Medium 5.8
    CVE-2024-27564 Public exploit Scanner template EPSS 41%

    pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references se…

    dirk1983 mm1.ltd source code
  • Medium 5.5
    CVE-2024-22889 Public exploit

    Phone information disclosure vulnerability

    Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request.

    plone PyPI