Skip to content
OpenAdvisories

Archive

2 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /2 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.6
    CVE-2024-4128

    CSRF in firebase-tools emulator suite

    This vulnerability was a potential CSRF attack. When running the Firebase emulator suite, there is an export endpoint that is used normally to export data from running emulators. If a user was running the emulator and navigated to a malicious website with the…

    Firebase firebase-tools firebase-tools github.com/firebase/firebase-tools npm Go
  • Low 3.3
    CVE-2024-23462

    ZCC Mac validinstaller file integrity check missing

    An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4.

    Zscaler Client Connector
  • Low 2.7
    CVE-2024-32882

    Permission check bypass when editing a model with per-field restrictions in wagtail

    Wagtail is an open source content management system built on Django. In affected versions if a model has been made available for editing through the `wagtail.contrib.settings` module or `ModelViewSet`, and the `permission` argument on `FieldPanel` has been us…

    wagtail wagtail wagtail PyPI
  • Low 3.4
    CVE-2024-3471

    Button Generator < 3.0 - Button Deletion via CSRF

    The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack

    Web / CMS