Skip to content
OpenAdvisories

Archive

13 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /13 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-5947 Public exploit Scanner template

    Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

    Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devic…

    Deep Sea Electronics DSE855
  • Critical 9.8
    CVE-2024-34102 Exploited Public exploit Scanner template EPSS 100%

    XXE can expose crypt key and other secrets granting full admin access

    Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability …

    Adobe Adobe Commerce magento/community-edition Packagist
    KEV Jul 17, 2024
  • Critical 9.8
    CVE-2024-3552 Public exploit Scanner template EPSS 67%

    Web Directory Free < 1.7.0 - Unauthenticated SQL Injection

    The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based…

    Web / CMS
  • Critical 10.0
    CVE-2024-3922 Public exploit Scanner template EPSS 53%

    Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

    The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. T…

    wedevs Dokan Pro Web / CMS
  • Critical 9.8
    CVE-2024-31777 Public exploit

    File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted fi…