Skip to content
OpenAdvisories

Archive

28 June 2024

Vulnerabilities first published on this day (UTC), newest first.

← May 2024 2024 / June /28 July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-39302

    Some bbb-record-core files installed with wrong file permission

    BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An attacker may be able to exploit the overly elevated file permissions in the `/usr/local/bigbluebutton/core/vendor/bundle/ruby/2.7.0/gems/resque-2.6.0` dir…

    bigbluebutton bigbluebutton
  • Low 3.5
    CVE-2024-39307

    Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita

    Kavita is a cross platform reading server. Opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Kavita doesn't sanitize or sandbox the contents of epubs, allowing scripts inside ebooks to execute. This vulnerabil…

    Kareadita Kavita
  • Low 2.0
    CVE-2024-3995

    Command Injection in Helix ALM

    In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Reported by Bryan Riggins.

    Perforce Helix ALM
  • Low 3.6
    CVE-2024-38531

    Nix sandbox escape

    Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible loc…

    NixOS Nix nix nix Debian Ubuntu
  • Low 3.3
    CVE-2024-30135

    Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10

    HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.

    HCL Software DRYiCE AEX
  • Low 3.3
    CVE-2024-30111

    Missing Root Detection vulnerability affects DRYiCE AEX v10

    HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security a…

    HCL Software DRYiCE AEX
  • Low 3.7
    CVE-2024-30110

    Lack of input validation vulnerability affects DRYiCE AEX v10

    HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways.

    HCL Software DRYiCE AEX
  • Low 3.7
    CVE-2024-30109

    Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10

    HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.

    HCL Software DRYiCE AEX
  • Low 3.8
    CVE-2024-37137

    Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulner…

    Dell CloudLink