Skip to content
OpenAdvisories

Archive

13 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /13 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • High 7.5
    CVE-2024-27821 Public exploit

    A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS So…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.4
    CVE-2024-27822 Public exploit

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to…

    Apple macOS macOS
  • High 8.1
    CVE-2024-27804 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 7.8
    CVE-2024-22774 Public exploit

    An issue in Panoramic Corporation Digital Imaging Software v.9.1.2.7600 allows a local attacker to escalate privileges …

  • High 7.8
    CVE-2024-31771 Public exploit

    Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file

  • High 7.3
    CVE-2023-46870 Public exploit

    extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bl…

  • Medium 6.1
    CVE-2024-34225 Public exploit

    Cross Site Scripting vulnerability in php-lms/admin/?page=system_info in Computer Laboratory Management System using PH…

  • Critical 9.4
    CVE-2024-34226 Public exploit

    SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.…

  • High 7.3
    CVE-2024-34224 Public exploit

    Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using …

  • High 8.8
    CVE-2024-34221 Public exploit

    Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escala…

  • Medium 5.9
    CVE-2024-34222 Public exploit

    Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter.

  • Medium 4.3
    CVE-2024-34223 Public exploit

    Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow…

  • Critical 10.0
    CVE-2024-29895 Public exploit Scanner template EPSS 99%

    Cacti command injection in cmd_realtime.php

    Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when `register_argc_argv` option of PHP is `On`. In `…

    Cacti cacti cacti Ubuntu
  • Critical 9.1
    CVE-2024-25641 Public exploit EPSS 86%

    Cacti RCE vulnerability when importing packages

    Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to e…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 8.0
    CVE-2024-27398 Public exploit

    Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is established and then, the sco socket is releasing, timeout_work will be scheduled to judge whether the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 10.0
    CVE-2024-32700 Public exploit

    WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Kognetiks Kognetiks Chatbot for WordPress.This issue affects Kognetiks Chatbot for WordPress: from n/a through 2.0.0.

    kognetiks Kognetiks Chatbot for WordPress Web / CMS
  • Medium 6.5
    CVE-2023-43040 Public exploit

    IBM Spectrum Fusion HCI improper access control

    IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

    IBM Spectrum Fusion HCI ceph ceph Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2024-35205 Public exploit

    The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names bef…