Skip to content
OpenAdvisories

Archive

2 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /2 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 6.3
    CVE-2024-5588

    itsourcecode Learning Management System processscore.php sql injection

    A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injecti…

    itsourcecode Learning Management System
  • Medium 6.1
    CVE-2024-36392

    MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Milesight DeviceHub
  • Critical 9.1
    CVE-2024-36391

    MileSight DeviceHub - CWE-320: Key Management Errors

    MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

    Milesight DeviceHub
  • High 7.5
    CVE-2024-36390

    MileSight DeviceHub - CWE-20 Improper Input Validation

    MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service

    Milesight DeviceHub
  • Critical 9.8
    CVE-2024-36389

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass

    Milesight DeviceHub
  • Critical 10.0
    CVE-2024-36388

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    Milesight DeviceHub
  • Critical 9.8
    CVE-2024-27776

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE

    Milesight DeviceHub
  • High 7.5
    CVE-2024-2178

    Path Traversal Vulnerability in parisneo/lollms-webui

    A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' endpoint in the 'lollms_personalities_infos.py' file. This vulnerability allows attackers to read arbitrary files by manipulating the 'catego…

    parisneo parisneo/lollms-webui
  • Medium 5.3
    CVE-2024-5587

    Casdoor Configuration File app.conf file access

    A vulnerability was found in Casdoor up to 1.335.0. It has been classified as problematic. Affected is an unknown function of the file /conf/app.conf of the component Configuration File Handler. The manipulation leads to files or directories accessible. It is…

  • Medium 4.3
    CVE-2024-4344

    Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery

    The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function.…

    paultgoodchild Shield: Blocks Bots, Protects Users, and Prevents Security Breaches Web / CMS