Skip to content
OpenAdvisories

Archive

April 2024

Vulnerabilities first published in this month (UTC), newest first.

← March 2024 2024 / April May 2024 →
  1. 1103
  2. 2173
  3. 3232
  4. 4139
  5. 5102
  6. 640
  7. 762
  8. 8119
  9. 9387
  10. 10218
  11. 1181
  12. 12128
  13. 1316
  14. 1414
  15. 15221
  16. 16243
  17. 17298
  18. 18124
  19. 19115
  20. 206
  21. 215
  22. 2281
  23. 2364
  24. 24131
  25. 2595
  26. 26138
  27. 2727
  28. 2844
  29. 29150
  30. 3074
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.7
    CVE-2024-3177 Public exploit

    Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

    A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFr…

    Kubernetes Kubernetes kubeflow-pipelines-apiserver argocd-image-updater Debian Azure Linux Wolfi Go
  • Low 3.4
    CVE-2024-3568 Public exploit

    Arbitrary Code Execution via Deserialization in huggingface/transformers

    The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by craf…

    Hugging Face huggingface/transformers transformers PyPI
  • Low 3.3
    CVE-2024-30350 Public exploit

    Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

    Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulne…

    Foxit PDF Reader