Skip to content
OpenAdvisories

Archive

4 June 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-25600 Public exploit Scanner template EPSS 91%

    WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

  • Critical 9.1
    CVE-2024-36104 Public exploit Scanner template EPSS 88%

    Apache OFBiz: Path traversal leading to a RCE

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.

  • Critical 9.8
    CVE-2024-29973 Public exploit Scanner template EPSS 86%

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmwa…

  • Critical 9.8
    CVE-2024-29972 Public exploit Scanner template EPSS 90%

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS32…