Skip to content
OpenAdvisories

Archive

3 April 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-25096 Public exploit

    WordPress canto plugin <= 3.0.7 - Unauth. Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.

  • Critical 9.8
    CVE-2024-2879 Public exploit Scanner template EPSS 18%

    The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.…

  • Critical 9.8
    CVE-2024-28515 Public exploit

    Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary co…

  • Critical 9.8
    CVE-2024-24724 Public exploit EPSS 26%

    Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to R…

  • Critical 9.8
    CVE-2024-30998 Public exploit

    SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitra…