Skip to content
OpenAdvisories

Archive

21 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /21 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

445 results · Feed

  • High 7.3
    CVE-2024-35061

    NASA AIT-Core uses unencrypted channels to exchange data over the network

    NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code ex…

    ait-core PyPI
  • High 7.5
    CVE-2024-35058

    NASA AIT-Core vulnerable to remote code execution

    An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string.

    ait-core PyPI
  • Critical 9.8
    CVE-2024-35056

    NASA AIT-Core vulnerable to SQL Injection

    NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the query_packets and insert functions.

    ait-core PyPI
  • High 7.5
    CVE-2024-35060

    An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplyin…

  • Medium 6.3
    CVE-2024-36039 Public exploit

    PyMySQL SQL Injection vulnerability

    PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.

    python-PyMySQL py3-pymysql pymysql python-pymysql Debian Ubuntu Azure Linux Wolfi PyPI