Skip to content
OpenAdvisories

Archive

8 April 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-30269 Public exploit Scanner template EPSS 16%

    DataEase has database configuration information exposure vulnerability

    DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configur…

  • Medium 6.0
    CVE-2024-27631 Public exploit

    Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privilege…

  • High 8.8
    CVE-2024-27632 Public exploit

    An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_he…

  • High 7.5
    CVE-2024-27630 Public exploit

    Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary fi…

  • High 7.8
    CVE-2024-26574 Public exploit

    Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code v…