Skip to content
OpenAdvisories

Archive

11 March 2024

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-49785 Public exploit Scanner template EPSS 83%

    NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

    NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP e…

  • Medium 5.3
    CVE-2023-6444 Public exploit Scanner template

    Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

    The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request.

  • Critical 9.8
    CVE-2024-0039 Public exploit

    In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This…

  • High 7.8
    CVE-2024-0044 Public exploit

    In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input vali…

  • High 8.8
    CVE-2024-0670 Public exploit

    Privilege escalation in windows agent

    Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges

  • Medium 5.5
    CVE-2024-1441 Public exploit

    Libvirt: off-by-one error in udevlistinterfacesbystatus()

    An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an u…