Skip to content
OpenAdvisories

Archive

9 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /9 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-1813 Public exploit

    Simple Job Board <= 2.11.0 - Unauthenticated PHP Object Injection via Job Application Fields

    The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthentica…

    PressTigers Simple Job Board Web / CMS
  • Critical 10.0
    CVE-2024-24576 Public exploit EPSS 20%

    Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows

    Rust is a programming language. The Rust Security Response WG was notified that the Rust standard library prior to version 1.77.2 did not properly escape arguments when invoking batch files (with the `bat` and `cmd` extensions) on Windows using the `Command`.…

    rust-lang rust
  • Critical 9.1
    CVE-2023-6319 Public exploit

    Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service

    A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker …

    LG webOS