Skip to content
OpenAdvisories

Archive

June 2024

Vulnerabilities first published in this month (UTC), newest first.

44 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-29973 Public exploit Scanner template EPSS 86%

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmwa…

  • Critical 9.8
    CVE-2024-29972 Public exploit Scanner template EPSS 90%

    ** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS32…

  • Critical 9.8
    CVE-2024-3829 Public exploit

    Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

    qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlin…

  • Critical 9.8
    CVE-2024-36042 Public exploit

    Silverpeas authentication bypass

    Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.