Skip to content
OpenAdvisories

Archive

24 June 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-3121 Public exploit

    Remote Code Execution in create_conda_env function in parisneo/lollms

    A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerability arises from the use of shell=True in the subprocess.Popen function, which allows an attacker to inject arbitrary …

  • Medium 6.1
    CVE-2024-34312 Public exploit

    Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a cross-site scripting (XSS) vulnerability vi…