Skip to content
OpenAdvisories

Archive

16 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /16 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2024-4956 Public exploit Scanner template EPSS 19%

    Nexus Repository 3 - Path Traversal

    Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.

    Sonatype Nexus Repository
  • High 7.0
    CVE-2024-3640 Public exploit

    Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

    An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…

    Rockwell Automation FactoryTalk® Remote Access™ ICS / OT
  • Medium 5.3
    CVE-2024-35176 Public exploit

    REXML contains a denial of service vulnerability

    REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.…

    ruby rexml kube-fluentd-operator ruby2.3 Debian Ubuntu Azure Linux Wolfi RubyGems
  • Medium 6.5
    CVE-2024-34958 Public exploit

    idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi…

  • Medium 6.1
    CVE-2024-34582 Public exploit

    Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Pass…

  • High 8.8
    CVE-2024-4351 Public exploit

    Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation

    The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for au…

    Themeum Tutor LMS Pro Web / CMS
  • High 8.4
    CVE-2024-3435 Public exploit

    Path Traversal in parisneo/lollms-webui

    A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the …

    parisneo parisneo/lollms-webui
  • High 7.5
    CVE-2024-4322 Public exploit Scanner template EPSS 31%

    Path Traversal in parisneo/lollms-webui

    A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the sy…

    parisneo parisneo/lollms-webui