Skip to content
OpenAdvisories

Archive

21 May 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-31989 Public exploit

    ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Despite having installed the latest version …

  • Critical 9.1
    CVE-2024-4442 Public exploit

    Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion

    The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for u…