Skip to content
OpenAdvisories

Archive

21 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /21 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.3
    CVE-2020-27352

    When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegat…

    Canonical snapd snapd snapd Debian Ubuntu
  • Critical 9.1
    CVE-2024-35767

    WordPress Squeeze plugin <= 1.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze allows Code Injection.This issue affects Squeeze: from n/a through 1.4.

    Bogdan Bendziukov Squeeze
  • Critical 9.8
    CVE-2023-38389

    WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

    Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8.

    artbees JupiterX Core
  • Critical 9.2
    CVE-2023-45197

    Adminer and AdminerEvo vulnerable to directory traversal and file upload

    The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supporte…

    Adminer AdminerEvo Adminer AdminerEvo
  • Critical 9.8
    CVE-2024-36288

    SUNRPC: Fix loop termination condition in gss_free_in_token_pages()

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-acc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-6027

    Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter

    The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to time-based SQL Injection via the ‘conditions’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficie…

    themifyme Themify – WooCommerce Product Filter Web / CMS
  • Critical 9.8
    CVE-2024-5756

    Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.23 - Unauthenticated SQL Injection via optin

    The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.23 due to insufficien…

    Icegram Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress Web / CMS
  • Critical 9.1
    CVE-2012-6664 Public exploit EPSS 30%

    Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow rem…

  • Critical 9.8
    CVE-2024-34989

    In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL inje…

  • Critical 10.0
    CVE-2024-36532

    Insecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate privileges by obtaining th…

  • Critical 9.8
    CVE-2014-5470 Public exploit EPSS 10%

    Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for p…