Skip to content
OpenAdvisories

Archive

24 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /24 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-29034

    CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained

    CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. The vulnerability CVE-2023-49090 wasn't fully addressed. This vulnerability is caused by the fact that when uploading to object storage, including Amazon S3, it is po…

    carrierwaveuploader carrierwave carrierwave RubyGems
  • Medium 6.3
    CVE-2020-36825

    cyberaz0r WebRAT api.php download_file unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A vulnerability has been found in cyberaz0r WebRAT up to 20191222 and classified as critical. This vulnerability affects the function download_file of the file Server/api.php. The manipulation of the argument nam…

    cyberaz0r WebRAT
  • Medium 6.3
    CVE-2024-2854

    Tenda AC18 setsambacfg formSetSambaConf os command injection

    A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is possible to launch the at…

    Tenda AC18
  • Medium 6.3
    CVE-2024-2853

    Tenda AC10U setsambacfg formSetSambaConf os command injection

    A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49. It has been rated as critical. This issue affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. The atta…

    Tenda AC10U
  • Medium 6.3
    CVE-2024-2851

    Tenda AC15 setsambacfg formSetSambaConf os command injection

    A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the function formSetSambaConf of the file /goform/setsambacfg. The manipulation of the argument usbName leads to os command injection. It is p…

    Tenda AC15
  • Medium 5.4
    CVE-2020-36827

    The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::…

  • Medium 5.3
    CVE-2018-25100

    The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies …

    libmojolicious-perl libmojolicious-perl Debian Ubuntu
  • Medium 6.5
    CVE-2024-30161

    In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly…

    qt6-base qtbase qtbase-opensource-src-gles Ubuntu Azure Linux