Skip to content
OpenAdvisories

Archive

2 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /2 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

59 results · Clear filters · Feed

  • High 7.3
    CVE-2024-3204

    c-blosc2 ndlz4x4.c ndlz4_decompress heap-based overflow

    A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical. Affected by this vulnerability is the function ndlz4_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c. The manipulation leads to heap-based buffer overflow. …

    blosc c-blosc2 c-blosc2 Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2024-3203

    c-blosc2 ndlz8x8.c ndlz8_decompress heap-based overflow

    A vulnerability, which was classified as critical, was found in c-blosc2 up to 2.13.2. Affected is the function ndlz8_decompress of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. The manipulation leads to heap-based buffer overflow. It is possible to l…

    blosc c-blosc2 c-blosc2 Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-30371

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30367

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30365

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30362

    Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabilit…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30361

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30360

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30359

    Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30358

    Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30357

    Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerabi…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30355

    Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability i…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30354

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30353

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30352

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30351

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30349

    Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30348

    Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnera…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30346

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30345

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30344

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30343

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30342

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30341

    Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

    Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability …

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30339

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30338

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in t…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30337

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.8
    CVE-2024-30336

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in tha…

    Foxit PDF Reader
  • High 7.1
    CVE-2024-31105

    WordPress Tax Rate Upload plugin <= 2.4.5 - CSRF leading to Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5.

    Adam Bowen Tax Rate Upload
  • High 7.1
    CVE-2024-31109

    WordPress Woocommerce Social Media Share Buttons plugin <= 1.3.0 - CSRF to Cross Site Scripting (XSS) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Toastie Studio Woocommerce Social Media Share Buttons allows Stored XSS.This issue affects Woocommerce Social Media Share Buttons: from n/a through 1.3.0.

    Toastie Studio Woocommerce Social Media Share Buttons Web / CMS
  • High 7.1
    CVE-2024-22248

    VMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be able to redirect a victim …

  • High 7.4
    CVE-2024-22246

    VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execu…

    Browsers
  • High 7.7
    CVE-2024-30248

    Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page

    Piccolo Admin is an admin interface/content management system for Python, built on top of Piccolo. Piccolo's admin panel allows media files to be uploaded. As a default, SVG is an allowed file type for upload. An attacker can upload an SVG which when loaded c…

    piccolo-orm piccolo_admin piccolo-admin PyPI
  • High 7.2
    CVE-2024-29949

    There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administ…

    Hikvision DS-77xxNI-Mx DS-76xxNI-Mx DS-7604NI-K1 / 4P(B)
  • High 8.2
    CVE-2023-52636

    libceph: just wait for more data to be available on the socket

    In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket A short read may occur while reading the message footer from the socket. Later, when the socket is ready for another read, the m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2024-26672

    drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()' Fixes the below: drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c:377 amdgpu_mca_smu_get_mca_ent…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2024-28226

    Fs has an improper input validation vulnerability

    in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.

    OpenHarmony OpenHarmony
  • High 7.7
    CVE-2024-22092

    Bundlemanager has an authentication bypass vulnerability

    in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.

    OpenHarmony OpenHarmony
  • High 7.1
    CVE-2024-26666

    wifi: mac80211: fix RCU use in TDLS fast-xmit

    In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix RCU use in TDLS fast-xmit This looks up the link under RCU protection, but isn't guaranteed to actually have protection. Fix that.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2024-26664

    hwmon: (coretemp) Fix out-of-bounds memory access

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map[] is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per pac…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu