Skip to content
OpenAdvisories

Archive

17 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /17 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low —
    GHSA-3fmq-x9q6-wm39

    random_compat Uses insecure CSPRNG

    random_compat versions prior to 2.0 are affected by a security vulnerability related to the insecure usage of Cryptographically Secure Pseudo-Random Number Generators (CSPRNG). The affected versions use openssl_random_pseudo_bytes(), which may result in insuf…

    paragonie/random_compat Packagist
  • Low —
    GHSA-9wrw-p9rm-r782

    onelogin/php-saml Improper signature validation on LogoutRequest/LogoutResponse.

    In order to verify Signatures on Logoutrequests and LogoutResponses we use the verifySignature of the class XMLSecurityKey from the xmlseclibs library. That method end up calling openssl_verify() depending on the signature algorithm used. The openssl_verify()…

    onelogin/php-saml Packagist
  • Low 3.7
    GHSA-7h74-7vcw-4mwp

    Insecure deserialize Vulnerability in FLOW3

    Due to a missing signature (HMAC) for a request argument, an attacker could unserialize arbitrary objects within FLOW3. To our knowledge it is neither possible to inject code through this vulnerability, nor are there exploitable objects within the FLOW3 Base …

    neos/flow Packagist
  • Low 3.7
    CVE-2024-5044

    Emlog Pro Cookie improper authentication

    A vulnerability was found in Emlog Pro 2.3.4. It has been classified as problematic. This affects an unknown part of the component Cookie Handler. The manipulation of the argument AuthCookie leads to improper authentication. It is possible to initiate the att…

  • Low 3.7
    CVE-2024-32708

    WordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affects Maintenance Mode: from n/a through 3.0.1.

    helderk Maintenance Mode
  • Low 3.7
    CVE-2024-22139

    WordPress WordPress Manutenção plugin <= 1.0.6 - Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in Filipe Seabra WordPress Manutenção allows Functionality Bypass.This issue affects WordPress Manutenção: from n/a through 1.0.6.

    Filipe Seabra WordPress Manutenção Web / CMS
  • Low 2.7
    CVE-2024-4214

    WordPress cardealer plugin <= 4.15 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Bill Minozzi Car Dealer allows Code Injection.This issue affects Car Dealer: from n/a through 4.15.

    Bill Minozzi Car Dealer
  • Low 3.7
    CVE-2024-30480

    WordPress CGC Maintenance Mode plugin <= 1.2 - IP Filtering Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows Functionality Bypass.This issue affects CGC Maintenance Mode: from n/a through 1.2.

    Pippin Williamson CGC Maintenance Mode