Skip to content
OpenAdvisories

Archive

4 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /4 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-31211 Public exploit

    Remote Code Execution in `WP_HTML_Token`

    WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution via its `__destruct()` magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4…

    WordPress wordpress-develop wordpress wordpress Web / CMS Debian Ubuntu
  • Medium 6.2
    CVE-2024-30270 Public exploit EPSS 27%

    mailcow Path Traversal and Arbitrary Code Execution Vulnerability

    mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability is a combination of path traversal and arbitrary code execution, speci…

    mailcow mailcow-dockerized
  • Medium 5.3
    CVE-2024-30255 Public exploit EPSS 85%

    HTTP/2: CPU exhaustion due to CONTINUATION frame flood

    Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8 are vulnerable to CPU exhaustion due to flood of CONTINUATION frames. Envoy's HTTP/2 codec allows the client t…

    envoyproxy envoy
  • Medium 4.7
    CVE-2024-25503 Public exploit

    Cross Site Scripting (XSS) vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary…