Skip to content
OpenAdvisories

Archive

20 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /20 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 8.8
    CVE-2024-4020

    Tenda FH1206 addressNat fromAddressNat buffer overflow

    A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument entrys leads to buffer overflow. The attack may be initiated re…

    Tenda FH1206
  • Medium 6.3
    CVE-2024-4019

    Byzoro Smart S80 Management Platform importhtml.php deserialization

    A vulnerability classified as critical has been found in Byzoro Smart S80 Management Platform up to 20240411. Affected is an unknown function of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. It is possible to launch …

    Byzoro Smart S80 Management Platform
  • Unscored —
    RUSTSEC-2024-0337

    The crate `zip_next` has been renamed to `zip`.

    Please switch to the new name. `zip_next` will receive no further releases.

    zip_next crates.io
  • Medium 6.4
    CVE-2024-4014

    hCaptcha for WordPress <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7-hcaptcha Shortcode

    The hCaptcha for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cf7-hcaptcha shortcode in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping on user supplied attrib…

    hcaptcha hCaptcha for WP Web / CMS
  • Medium 5.4
    CVE-2024-1730

    Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via urls in link fields, images fro…

    bdthemes Prime Slider – Addons For Elementor Web / CMS
  • Medium 6.4
    CVE-2024-1057

    ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishsuite_button' shortcode in all versions up to, and in…

    devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin Web / CMS