Skip to content
OpenAdvisories

Archive

23 April 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-3293 Public exploit

    rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode

    The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of …

  • High 8.8
    CVE-2024-32258 Public exploit

    The network server of fceux 2.7.0 has a path traversal vulnerability, allowing attackers to overwrite any files on the …