Skip to content
OpenAdvisories

Archive

27 March 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.6
    CVE-2024-28247 Public exploit

    Pihole Authenticated Arbitrary File Read with root privileges

    The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been discovered in Pihole that allows an authenticated user on the platform to read internal server files arbitrari…

  • High 8.6
    CVE-2024-1540 Public exploit

    Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow

    A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, po…

  • High 7.2
    CVE-2023-40289 Public exploit EPSS 18%

    A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can e…

  • High 7.5
    CVE-2024-25736 Public exploit

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /…

  • High 7.5
    CVE-2024-25734 Public exploit

    An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only …