Skip to content
OpenAdvisories

Archive

4 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /4 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-28999 Public exploit EPSS 14%

    SolarWinds Platform Race Condition Vulnerability

    The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.

    SolarWinds SolarWinds Platform
  • Critical 10.0
    CVE-2024-25600 Public exploit Scanner template EPSS 91%

    WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

    Codeer Bricks Builder
  • High 7.1
    CVE-2024-4254 Public exploit

    Secrets Exfiltration in gradio-app/gradio

    The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code…

    gradio-app gradio-app/gradio
  • High 8.8
    CVE-2024-37054 Public exploit

    MLFlow unsafe deserialization

    Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.

    MLflow MLflow mlflow PyPI
  • High 8.3
    CVE-2024-5420 Public exploit Scanner template

    Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro

    Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS)..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20…

    SEH Computertechnik INU-100 utnserver ProMAX utnserver Pro
  • High 7.5
    CVE-2024-4253 Public exploit

    Command Injection in gradio-app/gradio

    A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modi…

    gradio-app gradio-app/gradio gradio PyPI
  • Critical 9.1
    CVE-2024-36104 Public exploit Scanner template EPSS 88%

    Apache OFBiz: Path traversal leading to a RCE

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.

    Apache Software Foundation Apache OFBiz
  • Medium 5.4
    CVE-2024-0757 Public exploit

    Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE

    The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files

    Web / CMS
  • Critical 9.8
    CVE-2024-29973 Public exploit Scanner template EPSS 86%

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmwa…

    Zyxel NAS326 firmware NAS542 firmware Network devices
  • Critical 9.8
    CVE-2024-29972 Public exploit Scanner template EPSS 90%

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS32…

    Zyxel NAS326 firmware NAS542 firmware Network devices