Skip to content
OpenAdvisories

Archive

5 April 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.8
    CVE-2024-3217 Public exploit

    WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection

    The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

  • High 8.8
    CVE-2023-52235 Public exploit

    SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow…

  • High 7.8
    CVE-2024-29863 Public exploit

    A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 S…

  • High 7.5
    CVE-2024-22363 Public exploit

    SheetJS Regular Expression Denial of Service (ReDoS)

    SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).