Skip to content
OpenAdvisories

Archive

13 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /13 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • High 8.0
    CVE-2024-27398 Public exploit

    Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout When the sco connection is established and then, the sco socket is releasing, timeout_work will be scheduled to judge whether the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2024-4068

    Memory Exhaustion in braces

    The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, which wi…

    micromatch braces lerna kubeflow-pipelines-frontend Debian Ubuntu Azure Linux Wolfi npm
  • High 7.1
    CVE-2024-4747

    WordPress Propovoice CRM plugin <= 1.7.6.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Propovoice Propovoice CRM allows Stored XSS.This issue affects Propovoice CRM: from n/a through 1.7.6.2.

    Propovoice Propovoice CRM
  • High 7.8
    CVE-2024-35205 Public exploit

    The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names bef…

  • High 7.5
    CVE-2024-34459

    An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages wit…

    libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine
  • High 8.4
    CVE-2024-35204

    Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus l…