Skip to content
OpenAdvisories

Archive

9 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /9 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-3806 Public exploit

    Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

    The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, all…

    p-themes Porto Web / CMS
  • Medium 6.1
    CVE-2024-4041 Public exploit

    Yoast SEO <= 22.5 - Reflected Cross-Site Scripting

    The Yoast SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 22.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject a…

    Yoast Yoast SEO – Advanced SEO with real-time guidance and built-in AI Web / CMS
  • High 7.5
    CVE-2024-34220 Public exploit

    Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.

  • High 7.8
    CVE-2023-52654 Public exploit

    io_uring/af_unix: disable sending io_uring over sockets

    In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with uni…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-34351 Public exploit Scanner template

    Next.js Server-Side Request Forgery in Server Actions

    Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an …

    vercel next.js jitsucom-jitsu-console next Wolfi npm