Skip to content
OpenAdvisories

Archive

26 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /26 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.7
    CVE-2024-4901 EPSS 33%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, where a stored XSS vulnerability could be imported from a project with malicious co…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.5
    CVE-2024-6323

    Improper Isolation or Compartmentalization in GitLab

    Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.

    GitLab GitLab Web / CMS
  • High 8.8
    CVE-2024-28984

    Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

    Hitachi Vantara Pentaho Business Analytics Server
  • High 8.8
    CVE-2024-28983

    Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 10.1.0.0 and 9.3.0.7, including 8.3.x allow a malicious URL to inject content into the Analyzer plugin interface.

    Hitachi Vantara Pentaho Business Analytics Server
  • High 7.1
    CVE-2024-28982

    Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference

    Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference.

    Hitachi Vantara Pentaho Business Analytics Server
  • High 7.2
    CVE-2024-6354

    Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows …

    Devolutions Remote Desktop Manager
  • High 7.1
    CVE-2024-38272

    Auth Bypass in Quick Share

    There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows app we can't send a file without the user accept from the receiving device if the visibility is set…

    Google Nearby
  • High 7.6
    CVE-2024-4758

    Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF

    The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

    Web / CMS
  • High 8.8
    CVE-2024-37140

    Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection …

    Dell PowerProtect DD
  • High 8.8
    CVE-2024-29176

    Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A…

    Dell PowerProtect DD
  • High 7.3
    CVE-2024-34581

    The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a…

  • High 7.5
    CVE-2024-33329

    A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access intern…

  • High 7.5
    CVE-2024-36829

    Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted qu…

  • High 8.8
    CVE-2024-23767

    An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated c…

  • High 7.5
    CVE-2024-23766

    An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An …