Skip to content
OpenAdvisories

Archive

21 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /21 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2024-21683 Public exploit Scanner template EPSS 88%

    This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center an…

    Atlassian Confluence Data Center Web / CMS
  • Critical 9.1
    CVE-2024-31989 Public exploit

    ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on the same cluster could connect to the Redis server on port 6379. Despite having installed the latest version …

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • Medium 4.9
    CVE-2024-22275 Public exploit

    The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the …

    Virtualization
  • High 7.2
    CVE-2024-22274 Public exploit

    The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative…

    Virtualization
  • High 7.2
    CVE-2024-27130 Public exploit EPSS 38%

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the foll…

    QNAP Systems QTS QuTS hero
  • Medium 4.3
    CVE-2024-4875 Public exploit

    HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

    The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the 'ajax_dismiss' function in versions up to, and including, 2.5.2. This makes it possible f…

    devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder Web / CMS
  • Critical 9.1
    CVE-2024-4442 Public exploit

    Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion

    The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for u…

    wordpresschef Salon Booking System – Free Version Web / CMS
  • Medium 6.3
    CVE-2024-36039 Public exploit

    PyMySQL SQL Injection vulnerability

    PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

    pymysql python-pymysql python-pymysql python-PyMySQL Debian Ubuntu Azure Linux Wolfi PyPI