Skip to content
OpenAdvisories

Archive

3 May 2024

Vulnerabilities first published on this day (UTC), newest first.

16 results · Clear filters · Feed

  • High 7.2
    CVE-2024-4439 Public exploit Scanner template EPSS 71%

    WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versi…

  • High 7.8
    CVE-2023-50226 Public exploit

    Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability

    Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privil…

  • High 7.8
    CVE-2023-44452 Public exploit

    Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

    Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vuln…

  • High 7.8
    CVE-2023-44451 Public exploit

    Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability

    Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vu…

  • Critical 9.8
    CVE-2023-42115 Public exploit EPSS 12%

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists w…

  • Critical 9.8
    CVE-2023-40504 Public exploit Scanner template EPSS 89%

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabil…

  • Critical 9.8
    CVE-2023-40498 Public exploit EPSS 85%

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerabili…

  • High 7.8
    CVE-2023-40477 Public exploit EPSS 10%

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this…

  • High 8.8
    CVE-2023-38120 Public exploit

    Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

    Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerabil…

  • High 8.8
    CVE-2023-38098 Public exploit EPSS 13%

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

    NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. …

  • Critical 9.8
    CVE-2023-38096 Public exploit EPSS 82%

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is n…

  • High 8.8
    CVE-2023-35744 Public exploit

    D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Configuration Restore Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers.…

  • High 7.8
    CVE-2023-27363 Public exploit EPSS 42%

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulne…

  • High 8.2
    CVE-2023-27326 Public exploit

    Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability

    Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high…

  • High 7.5
    CVE-2023-27327 Public exploit

    Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

    Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execut…

  • Medium 6.5
    CVE-2024-30851 Public exploit

    Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive info…