Skip to content
OpenAdvisories

Archive

18 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /18 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-6129

    spa-cartcms Username login observable behavioral discrepancy

    A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Username Handler. The manipulation of the argument email leads to observable behavioral discrepancy. It…

  • Low 2.7
    CVE-2024-5967

    Keycloak: leak of configured ldap bind credentials through the keycloak admin console

    A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL  independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access (permission manage-realm) to …

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak RHEL-8 based Middleware Containers Maven
  • Low 3.5
    CVE-2024-38507

    In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible

    JetBrains Hub
  • Low 1.0
    CVE-2024-5899

    Improper trust check in Bazel Build intellij plugin

    When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectMana…

    BazelBuild intellij plugin github.com/bazelbuild/intellij Go