Skip to content
OpenAdvisories

Archive

5 June 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low —

    Typo3 Information Disclosure in Page Tree

    It has been discovered backend users not having read access to specific pages still could see them in the page tree which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.

  • Low 3.7

    Information Disclosure in TYPO3 CMS

    HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint.

  • Low 3.6

    Arbitrary JavaScript execution due to using outdated libraries

    ### Summary gradio-pdf projects with dependencies on the pdf.js library are vulnerable to CVE-2024-4367, which allows arbitrary JavaScript execution. ### PoC 1. Generate a pdf file with a malicious script in the fontmatrix. (This will run `alert(‘XSS’)`.) [po…

  • Low 3.7

    An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos…

  • Low 3.7

    An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos…