Skip to content
OpenAdvisories

Archive

16 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /16 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2024-1685

    Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection

    The Social Media Share Buttons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.0 via deserialization of untrusted input through the attachmentUrl parameter. This makes it possible for authenticated attacker…

    sygnoos Social Media Share Buttons Web / CMS
  • High 8.1
    CVE-2024-22259

    CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)

    Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/def…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • High 7.1
    CVE-2024-27194

    WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Andrei Ivasiuc Fontific | Google Fonts allows Stored XSS.This issue affects Fontific | Google Fonts: from n/a through 0.1.6.

    Andrei Ivasiuc Fontific | Google Fonts
  • High 7.1
    CVE-2024-27195

    WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in sverde1 Watermark RELOADED watermark-reloaded allows Cross Site Request Forgery.This issue affects Watermark RELOADED: from n/a through <= 1.3.5.

    sverde1 Watermark RELOADED
  • High 7.1
    CVE-2024-27197

    WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Bee BeePress allows Stored XSS.This issue affects BeePress: from n/a through 6.9.8.

    Bee BeePress
  • High 8.8
    CVE-2023-51474

    WordPress TerraClassifieds plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Pixelemu TerraClassifieds.This issue affects TerraClassifieds: from n/a through 2.0.3.

    Pixelemu TerraClassifieds
  • High 7.5
    CVE-2024-28640 EPSS 14%

    Buffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022 allows a remo…

  • High 7.5
    CVE-2024-28069

    A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthe…