Skip to content
OpenAdvisories

Archive

May 2024

Vulnerabilities first published in this month (UTC), newest first.

← April 2024 2024 / May June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Critical 9.6
    CVE-2024-29824 Exploited Public exploit Scanner template EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
    KEV Oct 2, 2024
  • Critical 9.8
    CVE-2024-23692 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Rejetto HTTP File Server 2.3m Unauthenticated RCE

    Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted H…

    rejetto HTTP File Server
    KEV Jul 9, 2024
  • Critical 9.8
    CVE-2024-4358 Exploited Public exploit Scanner template EPSS 97%

    Registration Authentication Bypass Vulnerability

    In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

    Progress Software Telerik Report Server
    KEV Jun 13, 2024
  • High 8.6
    CVE-2024-24919 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Information disclosure

    Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

    Check Point Check Point Quantum Gateway, Spark Gateway and CloudGuard Network Network devices
    KEV May 30, 2024
  • High 8.3
    CVE-2024-5274 Exploited Public exploit

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code insid…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV May 28, 2024
  • High 8.4
    CVE-2024-4978 Exploited EPSS 27%

    Malicious Code in Justice AV Solutions (JAVS) Viewer

    Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.

    Justice AV Solutions Viewer
    KEV May 29, 2024
  • Critical 9.6
    CVE-2024-4947 Exploited Public exploit EPSS 15%

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside…

    Google Chrome chromium chromium Browsers Debian Wolfi
    KEV May 20, 2024
  • High 7.8
    CVE-2024-30051 Exploited · Ransomware Public exploit

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 14, 2024
  • High 8.8
    CVE-2024-30040 Exploited

    Windows MSHTML Platform Security Feature Bypass Vulnerability

    Windows MSHTML Platform Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 14, 2024
  • High 8.3
    CVE-2024-4761 Exploited Public exploit EPSS 11%

    Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bound…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV May 16, 2024
  • Medium 5.5
    CVE-2024-27834 Exploited

    The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
    KEV Nov 4, 2026
  • Critical 9.6
    CVE-2024-4671 Exploited

    Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the re…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV May 13, 2024
  • Critical 9.1
    CVE-2024-32113 Exploited Public exploit Scanner template EPSS 100%

    Apache OFBiz: Path traversal leading to RCE

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

    Apache Software Foundation Apache OFBiz
    KEV Aug 7, 2024
  • Medium 6.5
    CVE-2023-50224 Exploited EPSS 20%

    TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

    TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not re…

    TP-Link Systems TL-WR841N Archer C5 TL-WR740N Network devices
    KEV Sep 3, 2025