Skip to content
OpenAdvisories

Archive

13 March 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-24549 Public exploit EPSS 23%

    Apache Tomcat: HTTP/2 header handling DoS

    Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …

  • High 8.6
    CVE-2024-0368 Public exploit

    Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

    The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys. This makes it possible for unauthenticated attackers to extr…