Skip to content
OpenAdvisories

Archive

16 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /16 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.3
    CVE-2024-6042

    itsourcecode Real Estate Management System property-detail.php sql injection

    A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The a…

    itsourcecode Real Estate Management System
  • High 8.8
    CVE-2024-38427

    In International Color Consortium DemoIccMAX before 85ce74e, a logic flaw in CIccTagXmlProfileSequenceId::ParseXml in I…

  • High 8.8
    CVE-2024-38457

    Xenforo before 2.2.16 allows CSRF.

  • High 7.8
    CVE-2024-38459

    langchain_experimental Code Execution via Python REPL access

    langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.

    langchain-experimental PyPI
  • High 8.8
    CVE-2024-38458

    Xenforo before 2.2.16 allows code injection.

  • High 7.5
    CVE-2024-38440

    Netatalk before 3.2.1 has an off-by-one error, and resultant heap-based buffer overflow and segmentation violation, bec…

    netatalk netatalk netatalk Debian Ubuntu Alpine
  • High 7.5
    CVE-2024-38461

    irodsServerMonPerf in iRODS before 4.3.2 attempts to proceed with use of a path even if it is not a directory.

  • High 7.5
    CVE-2024-38467

    Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized user information retrieval via the queryUser AP…