Skip to content
OpenAdvisories

Archive

26 March 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.9
    CVE-2023-48777 Public exploit Scanner template

    WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.

  • Critical 9.1
    CVE-2023-29386 Public exploit

    WordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0.

  • High 8.1
    CVE-2024-2887 Public exploit EPSS 18%

    Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary co…

  • High 7.5
    CVE-2024-23722 Public exploit

    In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the conten…

  • High 7.2
    CVE-2024-25420 Public exploit

    Ignite Realtime Openfire privilege escalation vulnerability

    An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.