Skip to content
OpenAdvisories

Archive

23 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /23 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2024-1603

    confirmed

    paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.

    PaddlePaddle paddlepaddle/paddle paddlepaddle PyPI
  • High 8.2
    CVE-2024-24832

    WordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9.

    Metagauss EventPrime
  • High 7.3
    CVE-2021-33633

    Command Injection in aops-ceres

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects …

    openEuler aops-ceres
  • High 8.8
    CVE-2024-2025

    BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request

    The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request funct…

    Themekraft BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages Web / CMS
  • High 8.8
    CVE-2024-24725 Public exploit EPSS 52%

    Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a PO…

  • High 8.8
    CVE-2024-23755

    ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is i…