Skip to content
OpenAdvisories

Archive

20 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /20 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-34693 Public exploit

    Apache Superset: Server arbitrary file read

    Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allo…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Medium 6.5
    CVE-2024-5522 Public exploit Scanner template

    HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

    The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

    Web / CMS
  • Medium 5.3
    CVE-2024-28397 Public exploit Scanner template

    js2py allows remote code execution

    An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

    kubeflow-pipelines-visualization-server js2py python-cloudscraper Ubuntu Wolfi PyPI