Skip to content
OpenAdvisories

Archive

21 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /21 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

86 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-2189

    Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSS

    The Social Icons Widget & Block by WPZOOM WordPress plugin before 4.2.18 does not sanitise and escape some of its Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_htm…

    Web / CMS
  • Medium 6.4
    CVE-2024-4943

    Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘has_field_link_rel’ parameter in all versions up to, and including, 2.0.46 due to insufficient input sanitization and output escaping. This makes it possible for authenticat…

    creativethemeshq Blocksy Web / CMS
  • Medium 6.4
    CVE-2024-3155

    Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 2.2.80 due to insufficient inp…

    PickPlugins Post Grid Web / CMS
  • Medium 5.5
    CVE-2024-0816

    The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local …

    Zyxel DX3300-T1 firmware Network devices
  • Medium 6.5
    CVE-2023-37929

    The buffer overflow vulnerability in the CGI program of the VMG3625-T50B firmware version V5.50(ABPM.8)C0 could allow a…

    Zyxel V5.50(ABPM.8)C0 firmware Network devices
  • Medium 6.3
    CVE-2024-36039 Public exploit

    PyMySQL SQL Injection vulnerability

    PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

    python-pymysql python-pymysql python-PyMySQL py3-pymysql Debian Ubuntu Azure Linux Wolfi PyPI