Skip to content
OpenAdvisories

Archive

8 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /8 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-34572

    WordPress Fancy Elementor Flipbox plugin <= 2.4.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePrix Fancy Elementor Flipbox fancy-elementor-flipbox allows Stored XSS.This issue affects Fancy Elementor Flipbox: from n/a through 2.4.2.

    ThemePrix Fancy Elementor Flipbox
  • Medium 6.5
    CVE-2024-34573

    WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pootlepress Pootle Pagebuilder – WordPress Page builder allows Stored XSS.This issue affects Pootle Pagebuilder – WordPress Page builder: from n/a through 5.…

    pootlepress Pootle Pagebuilder – WordPress Page builder Web / CMS
  • Medium 5.9
    CVE-2024-34574

    WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpsoul Table Maker allows Stored XSS.This issue affects Table Maker: from n/a through 1.9.1.

    wpsoul Table Maker
  • Medium 6.5
    CVE-2023-41651

    WordPress Multi-column Tag Map plugin <= 17.0.26 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Multi-column Tag Map.This issue affects Multi-column Tag Map: from n/a through 17.0.26.

    Multi-column Tag Map Multi-column Tag Map
  • Medium 6.5
    CVE-2024-1076

    SSL Zen <= 4.5.3 - Unauthenticated Private Keys Access

    The SSL Zen WordPress plugin before 4.6.0 does not properly prevent directory listing of the private keys folder, as it only relies on the use of .htaccess to prevent visitors from accessing the site's generated private keys, which allows an attacker to read …

    Web / CMS
  • Medium 6.4
    CVE-2024-3494

    Mesmerize Companion <= 1.6.148 - Authenticated (Contributor+) Stored Cross-Site Scripting via mesmerize_contact_form Shortcode

    The Mesmerize Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mesmerize_contact_form' shortcode in all versions up to, and including, 1.6.148 due to insufficient input sanitization and output escaping on user supp…

    Horea Radu Mesmerize Companion Web / CMS
  • Medium 6.5
    CVE-2024-22266

    VMware Avi Load Balancer updates address multiple vulnerabilities

     VMware Avi Load Balancer contains an information disclosure vulnerability. A malicious actor with access to the system logs can view cloud connection credentials in plaintext.

    VMware VMware Avi Load Balancer
  • Medium 5.4
    CVE-2024-32674

    Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is …

    heateor Heateor Social Login WordPress Web / CMS
  • Medium 6.2
    CVE-2024-4418

    Libvirt: stack use-after-free in virnetclientioeventloop()

    A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOE…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 4.4
    CVE-2024-4162

    KW Watcher Vulnerability ALlows Malicious Read Access to Memory

    A buffer error in Panasonic KW Watcher versions 1.00 through 2.83 may allow attackers malicious read access to memory.

    Panasonic Holdings KW Watcher
  • Medium 6.5
    CVE-2024-1930

    No Limit on Number of Open Sessions / Bad Session Close Behaviour

    No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions. There is no limit on how many sessions D-Bus clients may create using …

    Fedora dnf5daemon-server dnf5 Azure Linux
  • Medium 4.1
    CVE-2024-4456

    In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting paylo…

    Octopus Deploy Octopus Server
  • Medium 6.1
    CVE-2024-34255

    jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function.

  • Medium 5.3
    CVE-2024-33382

    An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration

  • Medium 5.9
    CVE-2024-25528

    RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffa…