Skip to content
OpenAdvisories

Archive

16 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /16 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-6041

    itsourcecode Gym Management System manage_user.php sql injection

    A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The atta…

    itsourcecode Gym Management System
  • Medium 6.3
    CVE-2024-6039 Public exploit

    Feng Office Workspaces sql injection

    A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The e…

  • Medium 6.1
    CVE-2024-36397

    Vantiva - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Vantiva MediaAccess DGA2232
  • Medium 6.5
    CVE-2023-27636 Public exploit

    Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.

  • Medium 6.2
    CVE-2024-38443

    C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, wh…

  • Medium 4.0
    CVE-2024-38465

    Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of …

  • Medium 6.1
    CVE-2024-38454

    ExpressionEngine before 7.4.11 allows XSS.

  • Medium 4.9
    CVE-2024-38460

    SonarQube logs sensitive information

    In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).

    org.sonarsource.sonarqube:sonar-web Maven