Skip to content
OpenAdvisories

Archive

28 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /28 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-2451

    Improper fingerprint validation in the TeamViewer Client

    Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows an attacker with administrative user rights to further elevate privileges via executable sideloading.

    TeamViewer Remote Full Client Remote Host
  • Medium 4.3
    CVE-2024-24584

    Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .m…

    libigl libigl slic3r-prusa Ubuntu
  • Medium 4.3
    CVE-2024-24583

    Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .m…

    libigl libigl slic3r-prusa Ubuntu
  • Medium 4.3
    CVE-2024-5428

    SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgery

    A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function save_product of the file /admin/index.php?page=manage_product of the component HTTP POST Request Handler. Th…

    SourceCodester Simple Online Bidding System
  • Medium 6.5
    GHSA-m2hh-2m46-x6j5

    silverstripe/framework may disclose database credentials during connection failure

    When running SilverStripe 3.7 or 4.x in dev mode with the mysqli database driver, there is a potential to disclose the connection details. We have blacklisted the sensitive parts of the connection information from being included in dev mode stack traces when …

    silverstripe/framework Packagist
  • Medium 4.8
    CVE-2023-37411

    IBM Aspera Faspex cross-site scripting

    IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust…

    IBM Aspera Faspex
  • Medium 5.7
    CVE-2024-2199

    389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

    A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Medium 4.9
    CVE-2024-28793

    IBM Engineering Workflow Management cross-site scripting

    IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential…

    IBM Engineering Workflow Management