Skip to content
OpenAdvisories

Archive

18 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /18 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-24578 Public exploit

    RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

    RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution (RCE) vulnerability, caused by multiple issues within the Java …

    jens-maus RaspberryMatic
  • Medium 5.3
    CVE-2024-27914 Public exploit

    Reflected Cross-Site Scripting (XSS) in search engine when debug mode is enabled in GLPI

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulne…

    GLPI glpi glpi Ubuntu
  • High 7.4
    CVE-2024-20767 Exploited Public exploit Scanner template EPSS 99%

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

    Adobe ColdFusion
    KEV Dec 16, 2024