Skip to content
OpenAdvisories

Archive

3 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /3 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-36782

    TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, whi…

  • Critical 9.8
    CVE-2024-36783

    TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the …

  • Critical 9.8
    CVE-2024-31682

    Incorrect access control in the fingerprint authentication mechanism of Phone Cleaner: Boost & Clean v2.2.0 allows atta…

  • Critical 9.8
    CVE-2024-37019

    Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication.

  • Critical 9.3
    CVE-2024-4332

    Improper Authentication in Tripwire Enterprise 9.1.0 APIs

    An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional "Auto-synchronize LDAP Users, Roles, and G…

    Fortra Tripwire Enterprise
  • Critical 9.4
    CVE-2024-0336

    Improper Access Control in EMTA Grups PDKS

    Missing Authentication for Critical Function vulnerability in EMTA Grup PDKS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDKS: from V3.04 before 20240603. NOTE: The vendor was contacted early about this disclosu…

    EMTA Grup PDKS
  • Critical 9.8
    CVE-2024-36568

    Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=.

  • Critical 9.8
    CVE-2024-3829 Public exploit

    Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

    qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlin…

    qdrant qdrant/qdrant qdrant-client PyPI
  • Critical 9.3
    CVE-2023-43556

    Buffer Copy Without Checking Size of Input in Hypervisor

    Memory corruption in Hypervisor when platform information mentioned is not aligned.

    Qualcomm Snapdragon
  • Critical 9.1
    CVE-2023-43551

    Improper Authentication in Multi-Mode Call Processor

    Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

    Qualcomm Snapdragon
  • Critical 9.3
    CVE-2023-43538

    Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

    Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

    Qualcomm Snapdragon
  • Critical 9.8
    CVE-2024-5404

    ifm: moneo prone to weak password recovery mechanism

    An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.

    ifm moneo appliance QHA210 moneo for Micosoft Windows moneo appliance QVA200 Windows
  • Critical 9.8
    CVE-2024-5311

    DigiWin EasyFlow .NET - SQL Injection

    DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands to read, modify, and delete database records.

    DigiWin EasyFlow .NET
  • Critical 9.8
    CVE-2024-36042 Public exploit

    Silverpeas authentication bypass

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

    org.silverpeas.core:silverpeas-core Maven
  • Critical 9.8
    CVE-2024-20067

    In modem, there is a possible out of bounds write due to improper input invalidation. This could lead to remote denial …

    MediaTek MT6813, MT6815, MT6835, MT6878, MT6897, MT6899, MT6986, MT6986D, MT6991, MT8792
  • Critical 9.6
    CVE-2023-51219

    A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-control…

  • Critical 9.1
    CVE-2024-34987

    A SQL Injection vulnerability exists in the `ofrs/admin/index.php` script of PHPGurukul Online Fire Reporting System 1.…