Skip to content
OpenAdvisories

Archive

9 May 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-34220 Public exploit

    Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.

  • High 7.8
    CVE-2023-52654 Public exploit

    io_uring/af_unix: disable sending io_uring over sockets

    In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with uni…

  • High 7.5
    CVE-2024-34351 Public exploit Scanner template

    Next.js Server-Side Request Forgery in Server Actions

    Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery (SSRF) vulnerability was identified in Next.js Server Actions. If the `Host` header is modified, and the below conditions are also met, an …