Skip to content
OpenAdvisories

Archive

22 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /22 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2024-38319

    IBM Security SOAR code execution

    IBM Security SOAR 51.0.2.0 could allow an authenticated user to execute malicious code loaded from a specially crafted script. IBM X-Force ID: 294830.

    IBM Security SOAR
  • High 7.3
    CVE-2024-6253

    itsourcecode Online Food Ordering System purchase.php sql injection

    A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack …

    itsourcecode Online Food Ordering System
  • High 7.2
    CVE-2024-3593

    UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset

    The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the ubermenu_delete_all_item_settings and ubermenu_reset_settings functions. Thi…

    sevenspark UberMenu Web / CMS
  • High 7.4
    CVE-2024-21514 Public exploit EPSS 19%

    SQL injection in opencart

    This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido payment extension for OpenCart, which is included by default in version 3.0.3.9. As an anonymous unauthenticated user, if the Divido payment…

    opencart/opencart Packagist
  • High 7.2
    CVE-2024-21518 EPSS 14%

    Zip slip in opencart

    This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to improper sanitization of the target path, allowing files within a malicious archive to traverse the filesystem and be ext…

    opencart/opencart Packagist
  • High 7.2
    CVE-2024-5791

    Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

    The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp_id' parameter in all versions up to, and including, 4.4.2 due to missing authorization checks on processAction functi…

    vcita Online Booking & Scheduling Calendar for WordPress by vcita Web / CMS