Skip to content
OpenAdvisories

Archive

1 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /1 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

62 results · Clear filters · Feed

  • Medium 5.5
    CVE-2024-26942

    net: phy: qcom: at803x: fix kernel panic with at8031_probe

    In the Linux kernel, the following vulnerability has been resolved: net: phy: qcom: at803x: fix kernel panic with at8031_probe On reworking and splitting the at803x driver, in splitting function of at803x PHYs it was added a NULL dereference bug where priv is…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2024-26940

    drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed

    In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed The driver creates /sys/kernel/debug/dri/0/mob_ttm even when the corresponding ttm_resource_manager is not allocated. This…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.1
    CVE-2024-28979

    Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Gene…

    Dell Dell OpenManage Enterprise
  • Medium 5.2
    CVE-2024-28978

    Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged…

    Dell Dell OpenManage Enterprise
  • Medium 6.1
    CVE-2023-23022

    Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows a…

  • Medium 6.1
    CVE-2023-23021

    Cross Site Scripting (XSS) vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to exe…

  • Medium 5.4
    CVE-2023-23019

    Cross site scripting (XSS) vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and em…

  • Medium 5.3
    CVE-2024-33766

    lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.

    lunasvg PyPI
  • Medium 4.3
    CVE-2024-33442

    An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component.

  • Medium 5.4
    CVE-2024-33307

    SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter i…

  • Medium 5.5
    CVE-2024-33764

    lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.

    lunasvg PyPI
  • Medium 6.1
    CVE-2024-33304

    SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Users.

  • Medium 6.5
    CVE-2024-33431

    An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via…

  • Medium 6.1
    CVE-2024-33424

    A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary…

  • Medium 6.2
    CVE-2024-33393

    An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted …

  • Medium 5.0
    CVE-2024-33767

    lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.

    lunasvg PyPI
  • Medium 5.5
    CVE-2024-32211

    An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensitive inform…

  • Medium 5.3
    CVE-2024-32213

    The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default,…

  • Medium 5.3
    CVE-2024-32210

    The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default…

  • Medium 5.3
    CVE-2024-30176

    In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared …

  • Medium 4.7
    CVE-2024-25676

    An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sani…

  • Medium 5.3
    CVE-2024-22830

    Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control w…