Skip to content
OpenAdvisories

Archive

May 2024

Vulnerabilities first published in this month (UTC), newest first.

← April 2024 2024 / May June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.6
    CVE-2024-29824 Exploited Public exploit Scanner template EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
    KEV Oct 2, 2024
  • Critical 9.8
    CVE-2024-23692 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Rejetto HTTP File Server 2.3m Unauthenticated RCE

    Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted H…

    rejetto HTTP File Server
    KEV Jul 9, 2024
  • Critical 9.8
    CVE-2024-4358 Exploited Public exploit Scanner template EPSS 97%

    Registration Authentication Bypass Vulnerability

    In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

    Progress Software Telerik Report Server
    KEV Jun 13, 2024
  • High 8.6
    CVE-2024-24919 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Information disclosure

    Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

    Check Point Check Point Quantum Gateway, Spark Gateway and CloudGuard Network Network devices
    KEV May 30, 2024
  • High 8.3
    CVE-2024-5274 Exploited Public exploit

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code insid…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV May 28, 2024
  • Critical 9.6
    CVE-2024-4947 Exploited Public exploit EPSS 15%

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside…

    Google Chrome chromium chromium Browsers Debian Wolfi
    KEV May 20, 2024
  • High 7.8
    CVE-2024-30051 Exploited · Ransomware Public exploit

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Windows DWM Core Library Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 14, 2024
  • High 8.3
    CVE-2024-4761 Exploited Public exploit EPSS 11%

    Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bound…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV May 16, 2024
  • Critical 9.1
    CVE-2024-32113 Exploited Public exploit Scanner template EPSS 100%

    Apache OFBiz: Path traversal leading to RCE

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

    Apache Software Foundation Apache OFBiz
    KEV Aug 7, 2024