Skip to content
OpenAdvisories

Archive

16 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /16 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2024-4956 Public exploit Scanner template EPSS 19%

    Nexus Repository 3 - Path Traversal

    Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.

    Sonatype Nexus Repository
  • High 7.0
    CVE-2024-3640 Public exploit

    Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

    An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…

    Rockwell Automation FactoryTalk® Remote Access™ ICS / OT
  • High 8.8
    CVE-2024-4351 Public exploit

    Tutor LMS Pro <= 2.7.0 - Missing Authorization to Privilege Escalation

    The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for au…

    Themeum Tutor LMS Pro Web / CMS
  • High 8.4
    CVE-2024-3435 Public exploit

    Path Traversal in parisneo/lollms-webui

    A path traversal vulnerability exists in the 'save_settings' endpoint of the parisneo/lollms-webui application, affecting versions up to the latest release before 9.5. The vulnerability arises due to insufficient sanitization of the 'config' parameter in the …

    parisneo parisneo/lollms-webui
  • High 7.5
    CVE-2024-4322 Public exploit Scanner template EPSS 31%

    Path Traversal in parisneo/lollms-webui

    A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the sy…

    parisneo parisneo/lollms-webui