Skip to content
OpenAdvisories

Archive

22 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /22 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-32459 Public exploit

    FreeRDP Out-Of-Bounds Read in ncrush_decompress

    FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients and servers that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. No known workarounds are…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Critical 9.8
    CVE-2024-4040 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated arbitrary file read and remote code execution in CrushFTP

    A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administra…

    CrushFTP CrushFTP
    KEV Apr 24, 2024
  • Critical 9.8
    CVE-2024-27348 Exploited Public exploit Scanner template EPSS 99%

    Apache HugeGraph-Server: Command execution in gremlin

    RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the…

    Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-api org.apache.hugegraph:hugegraph-core Maven
    KEV Sep 18, 2024
  • Critical 9.8
    CVE-2024-32238 Public exploit Scanner template EPSS 53%

    H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be access…

  • Critical 9.8
    CVE-2024-31666 Public exploit

    An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addo…