Skip to content
OpenAdvisories

Archive

18 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /18 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.3
    CVE-2024-5094

    SourceCodester Best House Rental Management System view_payment.php sql injection

    A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file view_payment.php. The manipulation of the argument id leads to sql injection. The attack may…

    SourceCodester Best House Rental Management System
  • High 7.3
    CVE-2024-5093

    SourceCodester Best House Rental Management System login.php sql injection

    A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The …

    SourceCodester Best House Rental Management System
  • High 7.5
    CVE-2024-31879

    IBM i denial of service

    IBM i 7.2, 7.3, and 7.4 could allow a remote attacker to execute arbitrary code leading to a denial of service of network ports on the system, caused by the deserialization of untrusted data. IBM X-Force ID: 287539.

    IBM i
  • High 7.8
    CVE-2024-3745

    MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

    MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user.

    MSI MSI Afterburner
  • High 7.5
    CVE-2024-2782 Public exploit Scanner template

    Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation

    The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint…

    techjewel Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Web / CMS
  • High 7.5
    CVE-2024-3812

    Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_linea' attribute. This makes it possible for authenticated attackers, with contributor-level and abov…

    Theme nectar Salient Core Web / CMS
  • High 8.8
    CVE-2024-3810

    Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcode 'image' attribute. This makes it possible for authenticated attackers, with contributor-level and above perm…

    Theme nectar Salient Shortcodes Web / CMS