Skip to content
OpenAdvisories

Archive

10 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /10 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Low 1.6
    CVE-2024-2365

    Musicshelf SHA-1 PinningTrustManager.java weak password hash

    A vulnerability classified as problematic was found in Musicshelf 1.0/1.1 on Android. Affected by this vulnerability is an unknown functionality of the file io\fabric\sdk\android\services\network\PinningTrustManager.java of the component SHA-1 Handler. The ma…

  • Low 1.8
    CVE-2024-2364

    Musicshelf Backup androidmanifest.xml backup

    A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized co…

  • Low 2.8
    CVE-2024-2314

    If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attac…

    IOVisor BPF Compiler Collection bcc bpfcc Debian Azure Linux
  • Low 2.8
    CVE-2024-2313

    If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged …

    bpftrace bpftrace bpftrace bpftrace Debian Azure Linux
  • Medium 5.3
    CVE-2024-2363

    AOL AIM Triton Invite denial of service

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in AOL AIM Triton 1.0.4. It has been declared as problematic. This vulnerability affects unknown code of the component Invite Handler. The manipulation of the argument CSeq leads to denial of service. …

    AOL AIM Triton
  • Low 3.7
    CVE-2024-2355

    keerti1924 Secret-Coder-PHP-Project secret_coder.sql inclusion of sensitive information in source code

    A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /secret_coder.sql. The manipulation leads to inclusion of sensitive information in …

    keerti1924 Secret-Coder-PHP-Project
  • Medium 4.3
    CVE-2024-2354

    Dreamer CMS toEdit cross-site request forgery

    A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack …

    Dreamer CMS
  • High 8.8
    CVE-2024-2353

    Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection

    A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to o…

    Toto Link X6000R
  • Medium 6.3
    CVE-2024-2352

    1Panel swap baseApi.UpdateDeviceSwap command injection

    A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input …

    github.com/1Panel-dev/1Panel Go
  • High 7.5
    CVE-2024-28757 Public exploit

    libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created vi…

    insighttoolkit4 expat matanza vtk Debian Ubuntu Azure Linux Alpine Wolfi