Skip to content
OpenAdvisories

Archive

23 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /23 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-6273

    SourceCodester Clinic Queuing System patient_side.php save_patient cross site scripting

    A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as problematic. Affected by this vulnerability is the function save_patient of the file patient_side.php. The manipulation of the argument Full Name/Contact/Address le…

    SourceCodester Clinic Queuing System
  • Medium 4.0
    CVE-2024-4841 Scanner template

    Path Traversal in parisneo/lollms-webui

    A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. By exploiting this vulnerability,…

    parisneo parisneo/lollms-webui
  • Medium 4.7
    CVE-2024-6269 EPSS 21%

    Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection

    A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function get_ip.addr_details of the file /view/vpn/autovpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argume…

    Ruijie RG-UAC
  • Medium 6.3
    CVE-2024-6266

    Pear Admin Boot loadDictItem sql injection

    A vulnerability classified as critical has been found in Pear Admin Boot up to 2.0.2. Affected is an unknown function of the file /system/dictData/loadDictItem. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit…

  • Medium 6.5
    CVE-2024-39334

    MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When …

  • Medium 6.5
    CVE-2024-39337

    Click Studios Passwordstate Core before 9.8 build 9858 allows Authentication Bypass.