Skip to content
OpenAdvisories

Archive

29 April 2024

Vulnerabilities first published on this day (UTC), newest first.

← March 2024 2024 / April /29 May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.1
    CVE-2024-4309 Public exploit

    SQL injection vulnerability in HubBank

    SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints (/user/transaction.php?id=1, /user/credit-debit_transaction.php?id=1,/…

    Ofofonobs HubBank
  • Critical 9.3
    CVE-2024-33559 Public exploit

    WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.

    8theme XStore
  • Medium 6.5
    CVE-2024-33648 Public exploit

    WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kemory Grubb Recencio Book Reviews recencio-book-reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through <= 1.66.0.

    Kemory Grubb Recencio Book Reviews
  • Critical 9.4
    CVE-2024-1874 Public exploit EPSS 33%

    Command injection via array-ish $command parameter of proc_open()

    In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply argu…

    PHP Group PHP php php83 Azure Linux Alpine
  • High 8.0
    CVE-2024-33438 Public exploit

    File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted…

  • High 7.6
    CVE-2024-31621 Public exploit Scanner template EPSS 60%

    Flowise vulnerable to code injection via api/v1

    An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component.

    flowise npm
  • High 7.8
    CVE-2024-27518 Public exploit

    An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges…

  • Medium 6.1
    CVE-2024-23995 Public exploit

    Cross Site Scripting (XSS) in Beekeeper Studio 4.1.13 and earlier allows remote attackers to execute arbitrary code in …