Skip to content
OpenAdvisories

Archive

18 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /18 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2024-32462 Public exploit

    Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the …

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2024-28189 Public exploit

    Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link

    Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, allowing the attacker t…

    judge0 judge0
  • Critical 10.0
    CVE-2024-28185 Public exploit

    Judge0 vulnerable to Sandbox Escape via Symbolic Link

    Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leveraged by an attacker to write to arbitrary files and gain code execution outside of the sandbox. When ex…

    judge0 judge0