Skip to content
OpenAdvisories

Archive

5 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /5 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-31848 Public exploit Scanner template

    A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedd…

    CData API Server
  • Critical 9.8
    CVE-2024-31218 Public exploit

    Missing Authentication for Critical Function in Webhood backend

    Webhood is a self-hosted URL scanner used analyzing phishing and malicious sites. Webhood's backend container images in versions 0.9.0 and earlier are subject to Missing Authentication for Critical Function vulnerability. This vulnerability allows an unauthen…

    webhood-io webhood
  • High 8.8
    CVE-2024-3217 Public exploit

    WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection

    The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

    Wp Directory Kit WP Directory Kit Web / CMS
  • High 8.8
    CVE-2023-52235 Public exploit

    SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow…

  • Medium 6.8
    CVE-2023-49965 Public exploit

    SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.

  • High 7.8
    CVE-2024-29863 Public exploit

    A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 S…

  • High 7.5
    CVE-2024-22363 Public exploit

    SheetJS Regular Expression Denial of Service (ReDoS)

    SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).

    sqlpad xlsx Wolfi npm