Skip to content
OpenAdvisories

Archive

April 2024

Vulnerabilities first published in this month (UTC), newest first.

← March 2024 2024 / April May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4040 Exploited Public exploit Scanner template EPSS 100%

    Unauthenticated arbitrary file read and remote code execution in CrushFTP

    A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administra…

    CrushFTP CrushFTP
    KEV Apr 24, 2024
  • Critical 9.8
    CVE-2024-27348 Exploited Public exploit Scanner template EPSS 99%

    Apache HugeGraph-Server: Command execution in gremlin

    RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the…

    Apache Software Foundation Apache HugeGraph-Server org.apache.hugegraph:hugegraph-api org.apache.hugegraph:hugegraph-core Maven
    KEV Sep 18, 2024
  • Critical 10.0
    CVE-2024-3400 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

    A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Apr 12, 2024
  • High 8.8
    CVE-2024-29988 Exploited Public exploit EPSS 45%

    SmartScreen Prompt Security Feature Bypass Vulnerability

    SmartScreen Prompt Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Apr 30, 2024
  • High 7.3
    CVE-2024-3273 Exploited Public exploit Scanner template EPSS 100%

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Requ…

    D-Link DNS-340L DNS-327L DNS-325 Network devices
    KEV Apr 11, 2024
  • Critical 9.8
    CVE-2024-3272 Exploited Public exploit Scanner template EPSS 98%

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the co…

    D-Link DNS-340L DNS-325 DNS-327L Network devices
    KEV Apr 11, 2024