Skip to content
OpenAdvisories

Archive

27 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /27 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.4
    CVE-2024-2997 Public exploit

    Bdtask Multi-Store Inventory Management System cross site scripting

    A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/U…

    Bdtask Multi-Store Inventory Management System
  • High 7.6
    CVE-2024-28247 Public exploit

    Pihole Authenticated Arbitrary File Read with root privileges

    The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been discovered in Pihole that allows an authenticated user on the platform to read internal server files arbitrari…

    pi-hole pi-hole
  • High 8.6
    CVE-2024-1540 Public exploit

    Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow

    A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, po…

    gradio-app gradio-app/gradio
  • Medium 5.4
    CVE-2024-28784 Public exploit

    IBM QRadar cross-site scripting

    IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-…

    IBM QRadar SIEM
  • Critical 9.8
    CVE-2023-31634 Public exploit

    In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. Af…

  • High 7.2
    CVE-2023-40289 Public exploit EPSS 18%

    A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can e…

  • Low 3.3
    CVE-2024-28085 Public exploit

    wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to oth…

    util-linux util-linux util-linux util-linux Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-25736 Public exploit

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /…

  • High 7.5
    CVE-2024-25734 Public exploit

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only …

  • Critical 9.1
    CVE-2024-25735 Public exploit Scanner template EPSS 51%

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwor…