Skip to content
OpenAdvisories

Archive

28 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /28 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-5737 Public exploit

    HTML Injection in AdmirorFrames Joomla! Extension

    Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrame…

    Nikola Vasilijevski AdmirorFrames
  • High 8.2
    CVE-2024-5736 Public exploit

    SSRF in AdmirorFrames Joomla! Extension

    Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

    Nikola Vasilijevski AdmirorFrames
  • Medium 6.3
    CVE-2024-5735 Public exploit

    Full Path Disclosure in AdmirorFrames Joomla! Extension

    Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.

    Nikola Vasilijevski AdmirorFrames