Skip to content
OpenAdvisories

Archive

14 June 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-37888 Public exploit

    The Open Link CKEditor plugin has a cross-site scripting (XSS) vulnerability in open link functionality

    The Open Link is a CKEditor plugin, extending context menu with a possibility to open link in a new tab. The vulnerability allowed to execute JavaScript code by abusing link href attribute. It affects all users using the Open Link plugin at version < **1.0.5*…

  • Critical 9.8
    CVE-2024-3912 Public exploit

    ASUS Router - Upload arbitrary firmware

    Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

  • Medium 5.3
    CVE-2024-5961 Public exploit

    Reflected XSS in 2ClickPortal

    Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. T…

  • Critical 9.8
    CVE-2024-27173 Public exploit

    insecure upload

    Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing executable code. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS s…