Skip to content
OpenAdvisories

Archive

8 May 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-24787 Public exploit

    Arbitrary code execution during build on Darwin in cmd/go

    On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

  • Medium 5.9
    CVE-2024-34568 Public exploit

    WordPress LetterPress Newsletter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1.