Skip to content
OpenAdvisories

Archive

June 2024

Vulnerabilities first published in this month (UTC), newest first.

← May 2024 2024 / June July 2024 →
  1. 121
  2. 210
  3. 3117
  4. 4187
  5. 5116
  6. 6179
  7. 7136
  8. 878
  9. 9107
  10. 10149
  11. 11227
  12. 12113
  13. 13321
  14. 14156
  15. 1530
  16. 1626
  17. 1775
  18. 1865
  19. 19223
  20. 20159
  21. 21137
  22. 2222
  23. 239
  24. 2497
  25. 25144
  26. 2682
  27. 27111
  28. 2880
  29. 2916
  30. 3021
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4885 Exploited Public exploit Scanner template EPSS 99%

    WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

    In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

    Progress Software WhatsUp Gold
    KEV Mar 3, 2025
  • Medium 6.8
    CVE-2024-37085 Exploited · Ransomware Public exploit EPSS 27%

    VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) pe…

    Virtualization
    KEV Jul 30, 2024
  • Critical 9.8
    CVE-2024-34102 Exploited Public exploit Scanner template EPSS 100%

    XXE can expose crypt key and other secrets granting full admin access

    Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability …

    Adobe Adobe Commerce magento/community-edition Packagist
    KEV Jul 17, 2024
  • High 7.0
    CVE-2024-30088 Exploited · Ransomware Public exploit EPSS 68%

    Windows Kernel Elevation of Privilege Vulnerability

    Windows Kernel Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 15, 2024
  • High 7.8
    CVE-2024-35250 Exploited Public exploit EPSS 25%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Dec 16, 2024
  • High 7.8
    CVE-2024-36971 Exploited Public exploit

    net: fix __dst_negative_advice() race

    In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first c…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Aug 7, 2024
  • Critical 9.8
    CVE-2024-4577 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Argument Injection in PHP-CGI

    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32…

    PHP Group PHP php php83 Azure Linux Alpine Wolfi
    KEV Jun 12, 2024
  • Medium 6.1
    CVE-2024-37383 Exploited Public exploit EPSS 74%

    Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.

    roundcube roundcube Debian Ubuntu
    KEV Oct 24, 2024
  • High 8.6
    CVE-2024-28995 Exploited Public exploit Scanner template EPSS 100%

    SolarWinds Serv-U L Directory Transversal Vulnerability

    SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

    SolarWinds SolarWinds Serv-U
    KEV Jul 17, 2024