Skip to content
OpenAdvisories

Archive

21 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /21 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

137 results · Feed

  • High 7.3
    CVE-2024-6213

    SourceCodester Food Ordering Management System Login Panel login.php sql injection

    A vulnerability was found in SourceCodester Food Ordering Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file login.php of the component Login Panel. The manipulation of the argument username leads to sql …

    SourceCodester Food Ordering Management System
  • Low 3.5
    CVE-2024-6212

    SourceCodester Simple Student Attendance System student_form.php get_student cross site scripting

    A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. Affected by this issue is the function get_student of the file student_form.php. The manipulation of the argument id leads to cross site scripting.…

    SourceCodester Simple Student Attendance System
  • Critical 9.1
    CVE-2012-6664 Public exploit EPSS 30%

    Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow rem…

  • Medium 4.8
    CVE-2022-42974

    In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-S…

  • Critical 9.8
    CVE-2024-34989

    In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL inje…

  • Medium 6.1
    CVE-2024-34452 Public exploit

    CMSimple_XH 1.7.6 allows XSS by uploading a crafted SVG document.

  • High 7.5
    CVE-2024-35537

    TVS Motor Company Limited TVS Connect Android v4.6.0 and IOS v5.0.0 was discovered to insecurely handle the RSA key pai…

  • Medium 5.4
    CVE-2024-38874

    events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability

    An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure direct object reference (IDOR) vulnerability with the potential to activate or dele…

    jweiland/events2 Packagist
  • Medium 5.3
    CVE-2024-38873

    FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

    An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the capt…

    studiomitte/friendlycaptcha Packagist
  • Critical 10.0
    CVE-2024-36532

    Insecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate privileges by obtaining th…

  • Medium 5.4
    CVE-2024-37673

    Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execut…

  • Medium 5.4
    CVE-2024-37675

    Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execut…

  • Medium 6.1
    CVE-2024-37654

    An issue in BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD…

  • Medium 5.4
    CVE-2024-37671

    Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execut…

  • Medium 5.4
    CVE-2024-37672

    Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execut…

  • Critical 9.8
    CVE-2014-5470 Public exploit EPSS 10%

    Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for p…

  • High 7.5
    CVE-2021-47621

    ClassGraph XML External Entity Reference

    ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks.

    management-api-for-apache-cassandra-5.0 management-api-for-apache-cassandra-5.0-compat io.github.classgraph:classgraph Wolfi Maven