Skip to content
OpenAdvisories

Archive

24 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /24 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-29868 Public exploit Scanner template

    Apache StreamPipes, Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation

    Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password recovery mechanism. This allows an attacker to guess the recovery token in a reasonable time and thereby to take over t…

    Apache Software Foundation Apache StreamPipes org.apache.streampipes:streampipes-resource-management Maven
  • Medium 6.8
    CVE-2024-3121 Public exploit

    Remote Code Execution in create_conda_env function in parisneo/lollms

    A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerability arises from the use of shell=True in the subprocess.Popen function, which allows an attacker to inject arbitrary …

    parisneo parisneo/lollms lollms PyPI
  • Critical 10.0
    CVE-2023-50029 Public exploit

    PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaS…

  • Critical 9.8
    CVE-2024-34313 Public exploit

    An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a p…

  • Medium 6.1
    CVE-2024-34312 Public exploit

    Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cross-site scripting (XSS) vulnerability vi…

  • Critical 9.8
    CVE-2024-37759 Public exploit

    DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerab…