Skip to content
OpenAdvisories

Archive

12 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /12 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2024-32019 Public exploit

    ndsudo: local privilege escalation via untrusted search path

    Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned execut…

    netdata netdata
  • Medium 6.3
    CVE-2024-3690 Public exploit

    PHPGurukul Small CRM Change Password sql injection

    A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to sql injection. The attack can be launched remotely. Th…

    PHPGurukul Small CRM
  • Critical 10.0
    CVE-2023-51409 Public exploit Scanner template EPSS 63%

    WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.

    Jordy Meow AI Engine: ChatGPT Chatbot
  • Critical 10.0
    CVE-2024-3400 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

    A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Apr 12, 2024
  • Medium 4.8
    CVE-2024-31839 Public exploit Scanner template

    tiagorlampert CHAOS vulnerable to Cross Site Scripting

    Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

    github.com/tiagorlampert/CHAOS Go
  • Medium 5.5
    CVE-2024-22526 Public exploit

    Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service (DoS) vi…

  • Medium 6.2
    CVE-2024-22734 Public exploit

    An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attac…