Skip to content
OpenAdvisories

Archive

29 May 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.6
    CVE-2024-36114 Public exploit

    Decompressors can crash the JVM and leak memory content in Aircompressor

    Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor (LZ4, LZO, Snappy, Zstandard) can crash the JVM for certain input, and in some cases also leak the c…

  • High 8.4
    CVE-2024-35333 Public exploit

    A stack-buffer-overflow vulnerability exists in the read_charset_decl function of html2xhtml 1.3. This vulnerability oc…

  • Critical 9.8
    CVE-2024-4358 Exploited Public exploit Scanner template EPSS 97%

    Registration Authentication Bypass Vulnerability

    In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

    KEV Jun 13, 2024