Skip to content
OpenAdvisories

Archive

9 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /9 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Critical 9.6
    CVE-2024-4671 Exploited

    Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the re…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV May 13, 2024
  • Critical 9.0
    CVE-2024-0087 EPSS 20%

    CVE

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, deni…

    NVIDIA NVIDIA Triton Inference Server
  • Critical 9.8
    CVE-2024-3070

    Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection

    The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input from the LastViewedPosts Cookie. This makes it possible for unauthenticated attac…

    jottlieb Last Viewed Posts by WPBeginner Web / CMS
  • Critical 9.8
    CVE-2024-3806 Public exploit

    Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

    The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, all…

    p-themes Porto Web / CMS
  • Critical 9.8
    CVE-2022-32504

    An issue was discovered on certain Nuki Home Solutions devices. The code used to parse the JSON objects received from t…

  • Critical 9.8
    CVE-2024-33874

    HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2024-32622

    HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_e…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-32621

    HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-32615

    HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c, caused…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-34209

    TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpPortF…

  • Critical 9.8
    CVE-2024-34213

    TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the SetPortFor…

  • Critical 9.8
    CVE-2024-32611

    HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-34204

    TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the se…

  • Critical 9.8
    CVE-2024-29164

    HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap, resulting in the corruption of the instructio…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-29159

    HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset, resulting in the corruption of the instructi…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-29157

    HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointe…

    hdf5 hdf5 hdf5 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-32735 Scanner template

    CyberPower PowerPanel Enterprise Missing Authentication

    An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.

    CyberPower CyberPower PowerPanel Enterprise
  • Critical 9.0
    CVE-2024-28075 EPSS 78%

    SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution

    The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. We thank Trend Micro Zero Day Initiative (ZDI) for its…

    SolarWinds Access Rights Manager
  • Critical 9.1
    CVE-2024-34365

    Apache Karaf Cave: Cave SSRF and arbitrary file access

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Karaf Cave.This issue affects all versions of Apache Karaf Cave. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to …

    Apache Software Foundation Apache Karaf Cave org.apache.karaf:cave Maven
  • Critical 9.1
    CVE-2024-3016

    NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-docum…

    NEC Platforms ITK-6D-1P(BK)TEL ITK-8TCGX-1(BK)TEL ITK-6DG-1P(BK)TEL