Skip to content
OpenAdvisories

Archive

2 May 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8
    CVE-2024-4406 Public exploit

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to e…

  • High 7.6
    CVE-2024-33911 Public exploit

    WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.

  • High 8.5
    CVE-2024-32114 Public exploit Scanner template

    Apache ActiveMQ: Jolokia and REST API were not secured with default configuration

    In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and the Message REST API are located). It means that anyone can use these layers without any required authentication. Potentially, anyone can …

  • High 7.5
    CVE-2023-50685 Public exploit

    An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script …

  • High 7.5
    CVE-2024-31964 Public exploit

    A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3…